NeoSense

Mohammed Althibyani WebLogic Server 10.3.6.0.0 / 12.1.3.0.0 / 12.2.1.3.0 / 12.2.1.4.0 / 14.1.1.0.0 - Unauthenticated RCE via GET request
webapps java

Valerio Alessandroni Mailman 1.x > 2.1.23 - Cross Site Scripting (XSS)
webapps cgi

Nikhil Kumar Online Examination System 1.0 - 'name' Stored Cross Site Scripting
webapps php

Mohammed Alshehri IP Watcher v3.0.0.30 - 'PACService.exe' Unquoted Service Path
local windows

Ömer Tuygun Prey 1.9.6 - _CronService_ Unquoted Service Path
local windows

Mohammed Alshehri Program Access Controller v1.2.0.0 - 'PACService.exe' Unquoted Service Path
local windows

İsmail Önder Kaya Exploit - EPSON 1.124 - 'seksmdb.exe' Unquoted Service Path
local windows

Ivo Palazzolo Oracle Business Intelligence Enterprise Edition 5.5.0.0.0 / 12.2.1.3.0 / 12.2.1.4.0 - 'getPreviewImage' Directory Traversal/Local File Inclusion
webapps linux CVE-2020-14864

Vaisha Bernard Blueman < 2.1.4 - Local Privilege Escalation
local linux CVE-2020-15238

Vaisha Bernard aptdaemon < 1.1.1 - File Existence Disclosure
local linux

Vaisha Bernard PackageKit < 1.1.13 - File Existence Disclosure
local linux

Alper Basaran CSE Bookstore 1.0 - Authentication Bypass
webapps php

Matthew Aberegg Nagios XI 5.7.3 - 'mibs.php' Remote Command Injection (Authenticated)
webapps php CVE-2020-5791

LiquidWorm GoAhead Web Server 5.1.1 - Digest Authentication Capture Replay Nonce Reuse
remote hardware

Gurkirat Singh Sphider Search Engine 1.3.6 - 'word_upper_bound' RCE (Authenticated)
webapps php

Serkan Sancar Client Management System 1.0 - 'searchdata' SQL injection
webapps php

« ... 203 204 205 206 207 208 209 210 211 212 213 ... »

page: 208/3001 [exploits: 48015]