webapps

日期	标题	类别	作者
2024-02-02	Electrolink FM/DAB/TV Transmitter – Pre-Auth MPFS Image Remote Code Execution	webapps	LiquidWorm
2024-02-02	Electrolink FM/DAB/TV Transmitter – Remote Authentication Removal	webapps	LiquidWorm
2024-02-02	Electrolink FM/DAB/TV Transmitter (Login Cookie) – Authentication Bypass	webapps	LiquidWorm
2024-02-02	Electrolink FM/DAB/TV Transmitter (controlloLogin.js) – Credentials Disclosure	webapps	LiquidWorm
2024-01-31	GoAhead Web Server 2.5 – ‘goform/formTest’ Multiple HTML Injection Vulnerabilities	webapps	Syed Affan Ahmed (ZEROXINN)
2024-01-31	Grocy <=4.0.2 - CSRF	webapps	Chance Proctor
2024-01-31	101 News 1.0 – Multiple-SQLi	webapps	nu11secur1ty
2024-01-31	Academy LMS 6.2 – SQL Injection	webapps	CraCkEr
2024-01-29	PHP Shopping Cart 4.2 – Multiple-SQLi	webapps	nu11secur1ty
2024-01-29	Fundraising Script 1.0 – SQLi	webapps	nu11secur1ty
2024-01-29	Bank Locker Management System – SQL Injection	webapps	SoSPiro
2023-10-09	Minio 2022-07-29T19-40-48Z – Path traversal	webapps	Jenson Zhao
2023-10-09	Clcknshop 1.0.0 – SQL Injection	webapps	CraCkEr
2023-10-09	Online ID Generator 1.0 – Remote Code Execution (RCE)	webapps	nu11secur1ty
2023-10-09	GLPI GZIP(Py3) 9.4.5 – RCE	webapps	Brian Peters
2023-10-09	Splunk 9.0.5 – admin account take over	webapps	Redway Security
2023-10-09	Shuttle-Booking-Software v1.0 – Multiple-SQLi	webapps	nu11secur1ty
2023-10-09	Limo Booking Software v1.0 – CORS	webapps	nu11secur1ty
2023-10-09	Webedition CMS v2.9.8.8 – Blind SSRF	webapps	Mirabbas Ağalarov
2023-10-09	BoidCMS v2.0.0 – authenticated file upload vulnerability	webapps	1337kid
2023-10-09	Cacti 1.2.24 – Authenticated command injection when using SNMP options	webapps	Antonio Francesco Sardella
2023-10-09	WordPress Sonaar Music Plugin 4.7 – Stored XSS	webapps	Furkan Karaarslan
2023-10-09	Coppermine Gallery 1.6.25 – RCE	webapps	Mirabbas Ağalarov
2023-10-09	Media Library Assistant WordPress Plugin – RCE and LFI	webapps	Florent MONTEL