Mantis <= 1.1.1 LFI

LFI Vulnerability in language parameter. This exploit is dangerous. Because the LFI is done with require on a value saved in SQL, if the path is non-existent, the user account will be broken. Additionally, this value must be = 32chars MySQL vachar32 Vulnerability Type: Local File Include For the...

Roundcube 0.2beta RCE

Remote command execution vulnerability in Roundcube bin/html2text.php Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

webERP 4.11.3 SQL Injection

SQL Injection vulnerability in webERP SalesInquiry.php Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

WordPress 2.8.3 RCE

Remote command execution vulnerability in WordPress Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

WHMCS 4.x LFI

Local file include vulnerability in WHMCS Vulnerability Type: Local File Include For the exploit source code contact DSquare Security sales team...

V-CMS 1.0 File Upload

File upload vulnerability in V-CMS inlineimageupload.php Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...

WordPress TheCartPress 1.1.1 RFI

Remote file include vulnerability in WordPressTheCartPress plugin Vulnerability Type: Remote File Include For the exploit source code contact DSquare Security sales team...

Wordpress Islidex 2.7 File Upload

File upload vulnerability in Wordpress Islidex plugin Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...

Joomla Component com_preventive 1.0.5 LFI

A simple LFI Vulnerability Vulnerability Type: Local File Include For the exploit source code contact DSquare Security sales team...

Adobe Robohelp Server 8 Upload

Adobe RoboHelp Server 8 Arbitrary File Upload Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...

PmWiki 2.2.34 RCE

Remote command execution vulnerability in PmWiki pagelist Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

Apache Roller File Disclosure

File disclosure vulnerability via XXE in Apache Roller Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...

WordPress Social Warfare 3.5.2 RCE

Remote Code Execution in WordPress Social Warfare plugin Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

Joomla Component com_bt_media SQL Injection

SQL Injection vulnerability in Joomla Component combtmedia categories parameter Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

WordPress N-Media Website Contact Form with File Upload 1.3.4 File Upload

File upload vulnerability in N-Media Website Contact Form with File Upload plugin Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...

Symantec Web Gateway 5.0.3 RCE

Remote command execution vulnerability in Symantec Web Gateway fromha.php Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

Apache-Struts < 2.2.0 RCE Windows

Apache-Struts2 / OpenSymphony-Xwork RCE Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

Joomla com_fields SQL Injection

SQL Injection vulnerability in Joomla comfields getListQuery method Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

Newscoop RFI

type a short description of the vulnerability here Vulnerability Type: Remote File Include For the exploit source code contact DSquare Security sales team...

Moodle <= 1.8.4 RCE

Moodle = 1.8.4 remote command execution vulnerability Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

AlienVault OSSIM 5.3.4 RCE

Remote command execution vulnerability in AlienVault OSSIM 5.3.4 nfsen.php customfmt parameter Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

ManageEngine Desktop Central 9.0.0 FileUploadServlet File Upload

File upload vulnerability in ManageEngine Desktop Central FileUploadServlet connectionId Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...

Sophos Web Protection Appliance 3.8.1 RCE

Remote root command execution vulnerability in Sophos Web Protection Appliance Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

Apache-Struts < 2.2.0 RCE Linux

Apache-Struts2 / OpenSymphony-Xwork RCE Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

Drupal WikiWiki SQL Injection

SQL Injection vulnerability in Drupal WikiWiki module find parameter Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

Dd-wrt Router Information Disclosure

Remote information disclosure Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...

ManageEngine Desktop Central 9.0.0 File Upload

File upload vulnerability in ManageEngine Desktop Central statusUpdate Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...

WANem 2.3 RCE

Remote code execution vulnerability in WANem result.php Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

vtiger CRM 5.0.4 LFI

Local file include vulnerability in vtiger CRM graph.php Vulnerability Type: Local File Include For the exploit source code contact DSquare Security sales team...

Exponent CMS 0.96 File Upload

File upload vulnerability in Exponent CMS uploadstandalone.php Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...

Unverse Whizzy CMS 10.01 LFI

Local file include vulnerability in Whizzy CMS whizzycms1001.php Vulnerability Type: Local File Include For the exploit source code contact DSquare Security sales team...

Apache-Struts ParameterInterceptor < 2.3.1.2 RCE Linux

Apache-Struts2 / OpenSymphony-Xwork RCE Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

OneForum SQL Injection

OneForum SQL injection via id Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

WordPress Relocate Upload 0.14 RFI

Remote file include vulnerability in WordPress Relocate Upload plugin Vulnerability Type: Remote File Include For the exploit source code contact DSquare Security sales team...

Apache-Struts DebuggingInterceptor < 2.3.1.1 RCE Windows

Apache-Struts2 / OpenSymphony-Xwork RCE Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

Wordpress Auto Attachments 0.2.9 File Upload

File upload vulnerability in Wordpress Auto Attachments plugin Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...

CMS Made Simple 1.8 LFI

Local file inclusion lib/translation.functions.php Vulnerability Type: Local File Include For the exploit source code contact DSquare Security sales team...

Silver Peak Unity Orchestrator SQL Injection

SQL Injection vulnerabilty in Silver Peak Unity Orchestrator Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

Citrix CloudBridge RCE

Remote command execution vulnerability in Citrix CloudBridge Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

Joomla Component com_publisher SQL Injection

SQL Injection vulnerability in Joomla Component compublisher Itemid parameter Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

RCE Generic

Generic RCE exploit, to be customized by workflows Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

ManageEngine EventLog Analyzer 10.6 SQL Injection

SQL Injection vulnerability in ManageEngine EventLog Analyzer runQuery Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

WordPress Advanced Video Embed File Disclosure

File disclosure vulnerability in WordPress Advanced Video Embed plugin Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...

Novell ZENworks Configuration Management UploadServlet File Upload

File upload vulnerability in Novell ZENworks Configuration Management UploadServlet Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...

vTiger CRM 5.4.0 kcfinder File Upload

File upload vulnerability in vtiger CRM kcfinder component Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...

Apache OFBiz 10.04.01 RCE (Linux)

Remote command execution vulnerability in ApacheOFBiz FlexibleStringExpander Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

PluXml 5.1.5 LFI

Local file include vulnerability in PluXml defaultlang parameter Vulnerability Type: Local File Include For the exploit source code contact DSquare Security sales team...

Oracle Secure Backup 10.2.0.2 RCE (Linux)

Remote command execution vulnerability in Oracle Secure Backup Administration Server login.php Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

Joomla Component com_jeguestbook 1.0 LFI

A simple LFI Vulnerability Vulnerability Type: Local File Include For the exploit source code contact DSquare Security sales team...

Plone RCE

type a short description of the vulnerability here Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...