Security Vulnerabilities & Exploits

[webapps] flatCore 1.5.5 - Arbitrary File Upload

The Exploit Database - 10 Duben, 2025 - 02:00
flatCore 1.5.5 - Arbitrary File Upload

[webapps] AquilaCMS 1.409.20 - Remote Command Execution (RCE)

The Exploit Database - 10 Duben, 2025 - 02:00
AquilaCMS 1.409.20 - Remote Command Execution (RCE)

[webapps] Typecho 1.3.0 - Stored Cross-Site Scripting (XSS)

The Exploit Database - 10 Duben, 2025 - 02:00
Typecho 1.3.0 - Stored Cross-Site Scripting (XSS)

[webapps] Typecho 1.3.0 - Race Condition

The Exploit Database - 10 Duben, 2025 - 02:00
Typecho 1.3.0 - Race Condition

[hardware] Cosy+ firmware 21.2s7 - Command Injection

The Exploit Database - 10 Duben, 2025 - 02:00
Cosy+ firmware 21.2s7 - Command Injection

[webapps] CodeAstro Online Railway Reservation System 1.0 - Cross Site Scripting (XSS)

The Exploit Database - 10 Duben, 2025 - 02:00
CodeAstro Online Railway Reservation System 1.0 - Cross Site Scripting (XSS)

[remote] K7 Ultimate Security K7RKScan.sys 17.0.2019 - Denial Of Service (DoS)

The Exploit Database - 10 Duben, 2025 - 02:00
K7 Ultimate Security K7RKScan.sys 17.0.2019 - Denial Of Service (DoS)

[webapps] PandoraFMS 7.0NG.772 - SQL Injection

The Exploit Database - 10 Duben, 2025 - 02:00
PandoraFMS 7.0NG.772 - SQL Injection

[webapps] Centron 19.04 - Remote Code Execution (RCE)

The Exploit Database - 10 Duben, 2025 - 02:00
Centron 19.04 - Remote Code Execution (RCE)

[webapps] Cisco Smart Software Manager On-Prem 8-202206 - Account Takeover

The Exploit Database - 10 Duben, 2025 - 02:00
Cisco Smart Software Manager On-Prem 8-202206 - Account Takeover

[webapps] Feng Office 3.11.1.2 - SQL Injection

The Exploit Database - 10 Duben, 2025 - 02:00
Feng Office 3.11.1.2 - SQL Injection

[webapps] PZ Frontend Manager WordPress Plugin 1.0.5 - Cross Site Request Forgery (CSRF)

The Exploit Database - 9 Duben, 2025 - 02:00
PZ Frontend Manager WordPress Plugin 1.0.5 - Cross Site Request Forgery (CSRF)

[webapps] ChurchCRM 5.9.1 - SQL Injection

The Exploit Database - 9 Duben, 2025 - 02:00
ChurchCRM 5.9.1 - SQL Injection

[webapps] Intelight X-1L Traffic controller Maxtime 1.9.6 - Remote Code Execution (RCE)

The Exploit Database - 9 Duben, 2025 - 02:00
Intelight X-1L Traffic controller Maxtime 1.9.6 - Remote Code Execution (RCE)

[webapps] ResidenceCMS 2.10.1 - Stored Cross-Site Scripting (XSS)

The Exploit Database - 9 Duben, 2025 - 02:00
ResidenceCMS 2.10.1 - Stored Cross-Site Scripting (XSS)

[webapps] Apache HugeGraph Server 1.2.0 - Remote Code Execution (RCE)

The Exploit Database - 9 Duben, 2025 - 02:00
Apache HugeGraph Server 1.2.0 - Remote Code Execution (RCE)

[webapps] Zohocorp ManageEngine ADManager Plus 7210 - Elevation of Privilege

The Exploit Database - 9 Duben, 2025 - 02:00
Zohocorp ManageEngine ADManager Plus 7210 - Elevation of Privilege

[webapps] Anchor CMS 0.12.7 - Stored Cross Site Scripting (XSS)

The Exploit Database - 9 Duben, 2025 - 02:00
Anchor CMS 0.12.7 - Stored Cross Site Scripting (XSS)

[webapps] Artica Proxy 4.50 - Remote Code Execution (RCE)

The Exploit Database - 9 Duben, 2025 - 02:00
Artica Proxy 4.50 - Remote Code Execution (RCE)

[webapps] DocsGPT 0.12.0 - Remote Code Execution

The Exploit Database - 9 Duben, 2025 - 02:00
DocsGPT 0.12.0 - Remote Code Execution
Syndikovat obsah