uWSGI Path Traversal File Disclosure

File disclosure vulnerability in uWSGI Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...

ManageEngine Applications Manager SQL Injection

SQL Injection vulnerability in ManageEngine Applications Manager jusername parameter Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

WordPress Asgaros Forum < 1.15.13 SQL Injection

SQL Injection vulnerabilty in WordPress Asgaros Forum plugin subscribetopic parameter Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

Dolibarr adherents/list.php SQL Injection

SQL Injection vulnerability in Dolibarr adherents/list.php statut parameter Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

Zenario CMS File Disclosure

File disclosure vulnerability in Zenario CMS compressor.php Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...

Apache 2.4.50 Path Traversal

Path traversal vulnerability in Apache Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...

Joomla Component com_s5clanroster LFI

A simple LFI Vulnerability Vulnerability Type: Local File Include For the exploit source code contact DSquare Security sales team...

Joomla Component com_guru SQL Injection

SQL Injection vulnerability in Joomla Component comguru Itemid parameter Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

Oracle E-Business File Disclosure

File disclosure vulnerability in Oracle E-Business bscpgraph.jsp Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...

Joomla Component JCK Editor 6.4.4 SQL Injection

SQL Injection vulnerability in Joomla Component JCK Editor links.php parent parameter Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

Nostromo Web Server RCE

Remote command execution vulnerability in Nostromo web server Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

Apache 2.4.50 RCE

Remote Code Execution in Apache Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

Joomla Component com_branch 3.0 SQL Injection

SQL Injection vulnerability in Joomla Component combranch store parameter Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

Apache Struts 2 Freemarker Tag Handling RCE

Remote command execution vulnerability in Apache Struts 2 freemarker tag handling Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

Apache Struts 2 Multiple Tags Result Namespace Handling RCE

Remote command execution vulnerability in Apache Struts 2 multiple tags result namespace handling Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

OpenEMR File Upload

File upload vulnerability in OpenEMR importtemplate.php docid parameter Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...

WordPress RegistrationMagic-Custom Registration Forms SQL Injection

SQL Injection vulnerability in WordPress RegistrationMagic-Custom Registration Forms plugin includes/classrmdbmanager.php Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

jQuery File Upload

File upload vulnerability in jQuery File Upload server/php/index.php Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...

eFront 3.6.10 Authentication Bypass and File Upload

File upload vulnerability in eFront /libraries/filesystem.class.php Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...

OpenEMR find_appt_popup_user.php SQL Injection

SQL Injection vulnerability in OpenEMR findapptpopupuser.php catid parameter Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

WordPress WPshop File Upload

File upload vulnerability in WordPress WPshop plugin ajax.php Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...

ManageEngine Multiple Products File Disclosure

File disclosure vulnerability in ManageEngine Firewall Analyzer, NetFlow Analyzer, Network Configuration Manager, OpManager and OpUtils Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...

NUUO NVRmini2 / NVRsolo File Upload

File upload vulnerability in NUUO NVRmini2 / NVRsolo upload.php Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...

WordPress Quick Chat SQL Injection

SQL Injection vulnerability in WordPress Quick Chat plugin Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

MODX Revolution < 2.6.4 File Upload

File upload vulnerability in MODX Revolution phpthumb class Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...

Moodle Jmol Plugin File Disclosure

File disclosure vulnerability in Moodle Jmol Plugin Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...

osCommerce 2.3.4.1 RCE

Remote Code Execution in osCommerce Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

OpenEMR File Disclosure

File disclosure vulnerability in OpenEMR importtemplate.php docid parameter Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...

MoinMoin 1.9.5 RCE

Remote command execution vulnerability in MoinMoin twikidraw action Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

ASUSTOR ADM 3.1 scope SQL Injection

SQL Injection vulnerability in ASUSTOR ADM scope parameter Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

OpenEMR Anything_simple.php SQL Injection

SQL Injection vulnerability in OpenEMR Anythingsimple.php encounter parameter Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

Joomla Component com_blog_calendar SQL Injection

SQL Injection vulnerability in Joomla Component comblogcalendar modid parameter Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

ASUSTOR ADM 3.1 album_id SQL Injection

SQL Injection vulnerability in ASUSTOR ADM albumid parameter Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

Pulse Connect Secure File Disclosure

File disclosure vulnerability in Pulse Connect Secure SSL VPN Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...

Joomla 1.5.0 to 3.4.5 Object Injection via User-Agent

Joomla suffers from an unauthenticated remote code execution that affects all versions from 1.5.0 to 3.4.5. By storing user supplied headers in the databases session table it's possible to truncate the input by sending an UTF-8 character. The custom created payload is then executed once the sessi...

F5 BIG-IP Traffic Management User Interface File Disclosure

File disclosure vulnerability in F5 BIG-IP Traffic Management User Interface Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...

Joomla Component com_pricelist 3.2.1 SQL Injection

SQL Injection vulnerability in Joomla Pricelist Component cat parameter Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

Odoo File Disclosure

File disclosure vulnerability in Odoo Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...

Mantisbt < 1.2.4 LFI

LFI on admin/upgradeunattended.php via dbtype Vulnerability Type: Local File Include For the exploit source code contact DSquare Security sales team...

WordPress WP Statistics < 13.0.8 SQL Injection

SQL Injection vulnerabilty in WordPress WP Statistics plugin ID parameter Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

WeBid 1.0.4 SQLi

SQL Injection vulnerability in WeBid Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

WordPress WP ecommerce Shop Styling 2.5 File Disclosure

File disclosure vulnerability in WordPress WP ecommerce Shop Styling plugin Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...

eLouai Force Download File Disclosure

File disclosure vulnerability in Force Download Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...

Joomla Component com_jssupportticket SQL Injection

SQL Injection vulnerability in Joomla Component comjssupportticket child parameter Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

WordPress SRS Simple Hits Counter SQL Injection

SQL Injection vulnerability in SRS Simple Hits Counter postid parameter Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

NETGEAR DGN1000/DGN2200 RCE

Remote code execution vulnerability in NETGEAR DGN1000/DGN2200 setup.cgi currentsetting.htm Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

Prestashop SmartBlog SQL Injection

SQL Injection vulnerabilty in Prestashop SmartBlog day parameter Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

WordPress Ultimate Form Builder Lite SQL Injection

SQL Injection vulnerability in WordPress Ultimate Form Builder Lite plugin /classes/ufbl-lib.php formid parameter Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

Elasticsearch RCE

Remote command execution vulnerability in Elasticsearch Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

WebPagetest 2.6 LFI

Local file include vulnerability in WebPagetest about.php Vulnerability Type: Local File Include For the exploit source code contact DSquare Security sales team...