webapps

日期	标题	类别	作者
2016-05-04	Alibaba Clone B2B Script – Admin Authentication Bypass	webapps	Meisam Monsef
2016-05-04	WordPress Plugin Ninja Forms 2.9.36 < 2.9.42 - File Upload (Metasploit)	webapps	Metasploit
2016-05-02	WordPress Plugin Ghost 0.5.5 – Unrestricted Export Download	webapps	Josh Brody
2016-04-29	GLPi 0.90.2 – SQL Injection	webapps	High-Tech Bridge SA
2016-04-29	Merit Lilin IP Cameras – Multiple Vulnerabilities	webapps	Orwelllabs
2016-04-29	Observium 0.16.7533 – (Authenticated) Arbitrary Command Execution	webapps	Dolev Farhi
2016-04-29	Observium 0.16.7533 – Cross-Site Request Forgery	webapps	Dolev Farhi
2016-04-27	RomPager 4.34 (Multiple Router Vendors) – ‘Misfortune Cookie’ Authentication Bypass	webapps	Milad Doorbash
2016-04-27	EMC ViPR SRM – Cross-Site Request Forgery	webapps	Han Sahin
2016-04-26	ImpressCMS 1.3.9 – SQL Injection	webapps	Manuel García Cárdenas
2016-04-25	NationBuilder – Multiple Persistent Cross-Site Scripting Vulnerabilities	webapps	LiquidWorm
2016-04-25	Gemtek CPE7000 – WLTCS-106 ‘sysconf.cgi’ Remote Command Execution (Metasploit)	webapps	Federico Scalco
2016-04-25	Gemtek CPE7000 – WLTCS-106 Administrator SID Retriever (Metasploit)	webapps	Federico Scalco
2016-04-25	C/C++ Offline Compiler and C For OS – Persistent Cross-Site Scripting	webapps	Vulnerability-Lab
2016-04-25	Totemomail 4.x/5.x – Persistent Cross-Site Scripting	webapps	Vulnerability-Lab
2016-04-21	Symantec Brightmail 10.6.0-7 – LDAP Credentials Disclosure (Metasploit)	webapps	Fakhir Karim Reda
2016-04-21	phpLiteAdmin 1.9.6 – Multiple Vulnerabilities	webapps	Ozer Goker
2016-04-21	Gemtek CPE7000 / WLTCS-106 – Multiple Vulnerabilities	webapps	Federico Ramondino
2016-04-20	PHPBack 1.3.0 – SQL Injection	webapps	hyp3rlinx
2016-04-19	modified eCommerce Shopsoftware 2.0.0.0 rev 9678 – Blind SQL Injection	webapps	Felix Maduakor
2016-04-18	pfSense Community Edition 2.2.6 – Multiple Vulnerabilities	webapps	Security-Assessment.com
2016-04-18	Webutler CMS 3.2 – Cross-Site Request Forgery	webapps	Keerati T.
2016-04-18	WordPress Plugin Kento Post View Counter 2.8 – Cross-Site Request Forgery / Cross-Site Scripting	webapps	cor3sm4sh3r
2016-04-18	WordPress Plugin leenk.me 2.5.0 – Cross-Site Request Forgery / Cross-Site Scripting	webapps	cor3sm4sh3r