webapps

日期	标题	类别	作者
2020-11-27	Best Support System 3.0.4 – ‘ticket_body’ Persistent XSS (Authenticated)	webapps	Ex.Mi
2020-11-27	ElkarBackup 1.3.3 – ‘Policy[name]’ and ‘Policy[Description]’ Stored Cross-site Scripting	webapps	Vyshnav nk
2020-11-27	House Rental 1.0 – ‘keywords’ SQL Injection	webapps	boku
2020-11-27	WordPress Theme Accesspress Social Icons 1.7.9 – SQL injection (Authenticated)	webapps	SunCSR
2020-11-27	Moodle 3.8 – Unrestricted File Upload	webapps	Sirwan Veisi
2020-11-27	Acronis Cyber Backup 12.5 Build 16341 – Unauthenticated SSRF	webapps	Julien Ahrens
2020-11-27	Laravel Administrator 4 – Unrestricted File Upload (Authenticated)	webapps	Xavi Beltran
2020-11-27	Ruckus IoT Controller (Ruckus vRIoT) 1.5.1.0.21 – Remote Code Execution	webapps	Emre SUREN
2020-11-27	WonderCMS 3.1.3 – ‘uploadFile’ Stored Cross-Site Scripting	webapps	Sun* Cyber Security Research Team
2020-11-27	WordPress Theme Wibar 1.1.8 – ‘Brand Component’ Stored Cross Site Scripting	webapps	Ilca Lucian Florin
2020-11-25	SyncBreeze 10.0.28 – ‘password’ Remote Buffer Overflow	webapps	Abdessalam king
2020-11-25	osCommerce 2.3.4.1 – ‘title’ Persistent Cross-Site Scripting	webapps	Emre Aslan
2020-11-25	WonderCMS 3.1.3 – ‘page’ Persistent Cross-Site Scripting	webapps	Mayur Parmar
2020-11-24	Apache OpenMeetings 5.0.0 – ‘hostname’ Denial of Service	webapps	SunCSR
2020-11-24	nopCommerce Store 4.30 – ‘name’ Stored Cross-Site Scripting	webapps	Hemant Patidar
2020-11-24	OpenCart 3.0.3.6 – ‘subject’ Stored Cross-Site Scripting	webapps	Hemant Patidar
2020-11-24	OpenCart 3.0.3.6 – ‘Profile Image’ Stored Cross-Site Scripting (Authenticated)	webapps	Hemant Patidar
2020-11-24	Seowon 130-SLC router 1.0.11 – ‘ipAddr’ RCE (Authenticated)	webapps	maj0rmil4d
2020-11-24	ZeroShell 3.9.0 – ‘cgi-bin/kerbynet’ Remote Root Command Injection (Metasploit)	webapps	Giuseppe Fuggiano
2020-11-23	TP-Link TL-WA855RE V5_200415 – Device Reset Auth Bypass	webapps	malwrforensics
2020-11-23	LifeRay 7.2.1 GA2 – Stored XSS	webapps	3ndG4me
2020-11-23	VTiger v7.0 CRM – ‘To’ Persistent XSS	webapps	Vulnerability-Lab
2020-11-20	WonderCMS 3.1.3 – ‘content’ Persistent Cross-Site Scripting	webapps	Hemant Patidar
2020-11-19	M/Monit 3.7.4 – Privilege Escalation	webapps	Dolev Farhi