193 matches found
Exploit for Unrestricted Upload of File with Dangerous Type in Verot_Project Verot
CVE-2019-19634 - class.upload.php = 2.0.4 Arbitrary file uplo...
Exploit for Code Injection in Apache Solr
CVE-2019-0193 Solr DataImport Handler RCE RCE-Vuln...
CVE-2018-7422
creationtimestamp| type| source ---|---|--- 2018-03-23 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44340 2024-06-22 09:28:36+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/55 2025-08-16 09:00:04+00:00| published-proof-of-concept|...
CVE-2017-7783
creationtimestamp| type| source ---|---|--- 2017-10-20 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43020...
CVE-2017-14495
creationtimestamp| type| source ---|---|--- 2017-10-02 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/42945 2026-07-26 07:01:56+00:00| seen| https://t.me/KaitNews/6804 2026-07-27 00:01:37+00:00| seen| https://t.me/KaitNews/6804 2026-07-29 06:00:05+00:00| seen|...
CVE-2017-10688
creationtimestamp| type| source ---|---|--- 2017-07-06 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/42299...
Concrete CMS: Password Reset link hijacking via Host Header Poisoning
Summary Concrete5 uses the Host header when sending out password reset links. This allows an attacker to insert a malicious host header, leading to password reset link / token leakage. Impact The victim will receive the malicious link in their email, and, when clicked, will leak the user's passwo...
CVE-2017-3563
creationtimestamp| type| source ---|---|--- 2017-04-20 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/41908...
CVE-2017-2459
creationtimestamp| type| source ---|---|--- 2017-04-04 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/41810...
CVE-2017-2483
creationtimestamp| type| source ---|---|--- 2017-04-04 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/41797...
CVE-2017-6465
creationtimestamp| type| source ---|---|--- 2017-03-04 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/41511 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/ftp/ftpshell51pwdreply.rb 2025-10-23 21:12:58+00:00| see...
CVE-2016-7225
creationtimestamp| type| source ---|---|--- 2016-11-15 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/40764 2026-07-29 12:01:30+00:00| seen| Telegram/PjuRxPzvGjVabf4gPWbBh7F8WJi6OJk2WzpXql3KPPBgA 2026-07-30 00:01:55+00:00| seen| Telegram/PjuRxPzvGjVabf4gPWbBh7F8WJi6OJk2WzpXql3KPPB...
CVE-2016-0079
creationtimestamp| type| source ---|---|--- 2016-10-20 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/40608 2026-07-29 12:01:34+00:00| seen| Telegram/PjuRxPzvGjVabf4gPWbBh7F8WJi6OJk2WzpXql3KPPBgA 2026-07-30 00:01:56+00:00| seen| Telegram/PjuRxPzvGjVabf4gPWbBh7F8WJi6OJk2WzpXql3KPPB...
Slack: [Screenhero] Subdomain takeover
Hi, I found out some neglected DNS records that can be exploited to takedown the subdomain of Slack's acquisition feedback.screenhero.com The security issue is that you have CNAME record that points feedback.screenhero.com to a screenhero.uservoice.com, but the problem is that the service is...
CVE-2015-6086
creationtimestamp| type| source ---|---|--- 2016-04-14 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39698...
CVE-2016-1720
creationtimestamp| type| source ---|---|--- 2016-01-28 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39367...
Emerson UltraSite 弱口令
参考链接: http://www.emersonclimate.com/Documents/Retail%20Solutions/Manuals/0261004Rev1.pdf...
Emerson Smart Wireless Gateway 1420 弱口令
参考链接: http://www2.emersonprocess.com/siteadmincenter/PM%20Rosemount%20Documents/00809-0200-4420.pdf...