webapps

日期	标题	类别	作者
2016-02-24	WordPress Plugin Extra User Details 0.4.2 – Privilege Escalation	webapps	Panagiotis Vagenas
2016-02-23	Ubiquiti Networks UniFi 3.2.10 – Cross-Site Request Forgery	webapps	Julien Ahrens
2016-02-23	Dell OpenManage Server Administrator 8.2 – (Authenticated) Directory Traversal	webapps	hantwister
2016-02-22	Thru Managed File Transfer Portal 9.0.2 – SQL Injection	webapps	SySS GmbH
2016-02-22	BlackBerry Enterprise Service < 12.4 (BES12) Self-Service - Multiple Vulnerabilities	webapps	Security-Assessment.com
2016-02-22	InstantCoder 1.0 iOS – Multiple Vulnerabilities	webapps	Vulnerability-Lab
2016-02-21	PEAR LiveUser < 0.16.8 - Arbitrary File Access	webapps	GulfTech Security
2016-02-20	SOLIDserver < 5.0.4 - Local File Inclusion	webapps	Saeed reza Zamanian
2016-02-19	Chamilo LMS – Persistent Cross-Site Scripting	webapps	Vulnerability-Lab
2016-02-19	Chamilo LMS IDOR – ‘messageId’ Delete POST Injection	webapps	Vulnerability-Lab
2016-02-19	Geeklog < 1.4.0 - Multiple Vulnerabilities	webapps	GulfTech Security
2016-02-19	ManageEngine Firewall Analyzer 8.5 – Multiple Vulnerabilities	webapps	Sachin Wagh
2016-02-18	ADOdb < 4.71 - Cross Site Scripting	webapps	GulfTech Security
2016-02-18	DirectAdmin 1.491 – Cross-Site Request Forgery	webapps	Necmettin COSKUN
2016-02-18	Vesta Control Panel 0.9.8-15 – Persistent Cross-Site Scripting	webapps	Necmettin COSKUN
2016-02-17	Redaxo 5.0.0 – Multiple Vulnerabilities	webapps	LSE Leading Security Experts GmbH
2016-02-17	OCS Inventory NG 2.2 – SQL Injection	webapps	Ephreet
2016-02-17	JMX2 Email Tester – ‘save_email.php’ Arbitrary File Upload	webapps	HaHwul
2016-02-16	phpMyBackupPro 2.5 – Remote Command Execution / Cross-Site Request Forgery	webapps	hyp3rlinx
2016-02-16	WordPress Plugin ALO EasyMail NewsLetter 2.6.01 – Cross-Site Request Forgery	webapps	Mohsen Lotfi
2016-02-16	ManageEngine Network Configuration Management Build 11000 – Privilege Escalation	webapps	Kaustubh G. Padwad
2016-02-16	ManageEngine OPutils 8.0 – Multiple Vulnerabilities	webapps	Kaustubh G. Padwad
2016-02-15	Tiny Tiny RSS – Blind SQL Injection	webapps	Kacper Szurek
2016-02-10	Yeager CMS 1.2.1 – Multiple Vulnerabilities	webapps	SEC Consult