Apache Roller OGNL Injection

This module exploits an OGNL injection vulnerability in Apache Roller 5.0.2. The vulnerability is due to an OGNL injection on the UIAction controller because of an insecure usage of the ActionSupport.getText method. Vulnerability Type: Remote Command Execution For the exploit source code contact...

vBulletin 5.x Remote Administrator Injection

Remote administrator injection vulnerability in vBulletin upgrade.php Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...

vBulletin 4.1.x RCE

Remote command execution vulnerability in vBulletin upgrade.php Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

Pydio File Upload

Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...

Ginkgo CMS 5.0 SQL Injection

SQL Injection vulnerability in Ginkgo CMS rang parameter Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

Apache-Struts IncludeParams < 2.3.14.2 RCE Linux

Apache-Struts2 / OpenSymphony-Xwork RCE Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

HP PCM+ SNAC Registration Server UpdateCertificatesServlet File Upload

File upload vulnerability in HP PCM+ SNAC Registration Server UpdateCertificatesServlet Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...

HP PCM+ SNAC Registration Server UpdateDomainControllerServlet File Upload

File upload vulnerability in HP PCM+ SNAC Registration Server UpdateDomainControllerServlet Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...

BigTree CMS 4.0 RC2 SQL Injection

SQL Injection vulnerability in BigTree CMS Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

GLPI 0.84.1 RCE

Remote command execution vulnerability in GLPI install/install.php Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

Xibo 1.4.1 LFI

Local file include vulnerability in Xibo p parameter Vulnerability Type: Local File Include For the exploit source code contact DSquare Security sales team...

Sophos Web Protection Appliance 3.8.1 RCE

Remote root command execution vulnerability in Sophos Web Protection Appliance Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

PineApp Mail-SeCure 3.70 livelog.html RCE

Remote code execution vulnerability in PineAppMail-SeCure livelog.html Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

Joomla 1.5.26 File Upload

File upload vulnerability in Joomla Media Manager Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...

Joomla 2.5.13 & 3.1.4 File Upload

File upload vulnerability in Joomla Media Manager Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...

PineApp Mail-SeCure 3.70 conflivelog.pl RCE

Remote code execution vulnerability in PineAppMail-SeCure conflivelog.pl Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

OpenX 2.8.10 RCE

Remote code execution vulnerability in OpenX 2.8.10backdoor Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

php-Charts 1.0 RCE

Remote command execution in php-Charts type parameter Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

Apache-Struts IncludeParams < 2.3.14.1 RCE Linux

Apache-Struts2 / OpenSymphony-Xwork RCE Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

Novell ZENworks Configuration Management 11 SP2 File Upload

File upload vulnerability in Novell ZENworks Configuration Management Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...

vBulletin 5.0.0 Beta xx SQL Injection

SQL Injection vulnerability in vBulletin nodeid Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

McAfee Email Gateway 7.0 File Disclosure

File disclosure vulnerability in McAfee Email Gateway Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...

Apache OFBiz 10.04.01 RCE (Linux)

Remote command execution vulnerability in ApacheOFBiz FlexibleStringExpander Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

MoinMoin 1.9.5 RCE

Remote command execution vulnerability in MoinMoin twikidraw action Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

Symantec Web Gateway 5.0.3 RCE

Remote command execution vulnerability in Symantec Web Gateway fromha.php Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

WordPress A Page Flip Book 2.3 LFI

Remote file include vulnerability in WordPress A Page Flip Book plugin Vulnerability Type: Local File Include For the exploit source code contact DSquare Security sales team...

WikkaWiki 1.3.1 SQL Injection

SQL Injection vulnerability in WikkaWiki Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

SolarWinds Storage Manager 5.1.2 SQL Injection

SQL Injection vulnerability in SolarWinds Storage Manager LoginServlet Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

Symantec Web Gateway 5.0.3 SQLi

SQL Injection vulnerability in Symantec Web Gateway search.php Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

ReciPHP 1.1 SQLi

SQL Injection vulnerability in ReciPHP Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

Serendipity 1.6.1 SQL Injection

SQL Injection vulnerability in Serendipity Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

PRADO 3.2.0 File Disclosure

File disclosure vulnerability in PRADO sr parameter Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...

WordPress Mac Photo Gallery 2.8 File Disclosure

File disclosure vulnerability in WordPress Mac Photo Gallery plugin Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...

Zabbix 2.0 SQL Injection

SQL Injection vulnerability in Zabbix itemid parameter Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

Business Wiki 2.5 File Upload

File upload vulnerability in Business Wiki Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...

Cyclope 6.0 SQL Injection

SQL Injection vulnerability in Cyclope Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

ProQuiz 2.0.2 RFI

Remote file include vulnerability in ProQuiz page parameter Vulnerability Type: Remote File Include For the exploit source code contact DSquare Security sales team...

Foswiki 1.1.5 RCE

Remote code execution vulnerability in Foswiki Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

TWiki 5.1.2 RCE

Remote code execution vulnerability in TWiki Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

WANem 2.3 RCE

Remote code execution vulnerability in WANem result.php Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

ProQuiz 2.0.2 SQL Injection

SQL Injection vulnerability in ProQuiz Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

Phpmyadmin Backdoor RCE

PhpMyAdmin Backdoor Arbitrary Command Execution Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

Elite Bulletin Board 2.1.21 SQL Injection

SQL Injection vulnerability in Elite Bulletin Board Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

HP SiteScope 11.20 File Upload

File upload vulnerability in HP SiteScope UploadFilesHandler Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...

Bitweaver 2.8.1 LFI

Local file include vulnerability in Bitweaver overlaytype parameter Vulnerability Type: Local File Include For the exploit source code contact DSquare Security sales team...

ViArt Shop 4.1 RFI

Remote file include vulnerability in ViArt Shop 4.1 rootfolderpath parameter Vulnerability Type: Remote File Include For the exploit source code contact DSquare Security sales team...

Symantec Web Gateway 5.0.3.18 RCE

Remote command execution vulnerability in Symantec Web Gateway pbcontrol.php Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

Kordil EDMS v2.2.60rc3 SQL Injection

SQL Injection vulnerability in Kordil EDMS Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

Invision Power Board 3.3.4 RCE

Remote command execution vulnerability in Invision Power Board core.php unserialize Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...

MobileCartly 1.0 File Upload

File upload vulnerability in MobileCartly savepage.php Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...