Exploit-DB lists an RCE exploit for Open eClass 3.15
The feed names Open eClass 3.15 only and does not describe access requirements or a patch.
Stories per day · 30 days
26 stories, newest first · one card per story
Stories tagged #webapps
Keycloak 26.7.2 unauthenticated account takeover exploit published
Exploit-DB lists a web-app exploit that takes over accounts in Keycloak 26.7.2 without authentication.
pizzafy 1.0 web app has a published SQL injection exploit
Exploit-DB lists the issue under webapps; no CVE, patch, or confirmed attacks are stated.
[webapps] Metabase 0.61.0 - Authenticated Remote Code Execution
Exploit-DB published an authenticated remote code execution exploit targeting Metabase version 0.61.0.
[webapps] FreePBX 17.0.2 - Remote Code Execution (RCE)
Exploit-DB published a remote code execution exploit targeting FreePBX version 17.0.2.
[webapps] Bludit CMS 3.20.0 - Reflected Cross-Site Scripting
A reflected cross-site scripting flaw in Bludit CMS 3.20.0 is documented with a public proof-of-concept exploit on Exploit-DB.
[webapps] PodcastGenerator 3.2.9 - Stored XSS
A stored cross-site scripting flaw in PodcastGenerator 3.2.9 is documented with a public proof-of-concept exploit on Exploit-DB.
[webapps] EasyAppointments 1.5.1 - Blind SQL Injection
A proof-of-concept exploit for a blind SQL injection vulnerability in EasyAppointments 1.5.1 has been published on Exploit-DB.
[webapps] Grav CMS 2.0.7 - RCE
A proof-of-concept exploit for remote code execution in Grav CMS 2.0.7 has been published on Exploit-DB.
[webapps] Payload CMS 3.72.0 - Blind SQL Injection
A proof-of-concept exploit for a blind SQL injection vulnerability in Payload CMS 3.72.0 has been published on Exploit-DB.
[webapps] Bludit CMS - Stored XSS
A stored cross-site scripting (XSS) vulnerability in Bludit CMS was disclosed through a public proof-of-concept published on Exploit-DB.
[webapps] Wolf CMS 0.8.3.1 - RCE v
A proof-of-concept exploit for remote code execution in Wolf CMS 0.8.3.1 has been published on Exploit-DB.
[webapps] miniOrange 5.4.3 - Unauthenticated Auth Bypass
A proof-of-concept exploit for an unauthenticated authentication bypass in miniOrange 5.4.3 has been published on Exploit-DB.
[webapps] CubeCart 6.7.4 - Stored XSS
A proof-of-concept stored cross-site scripting exploit targeting CubeCart 6.7.4 was published on Exploit-DB.
[webapps] C-MOR 6.0104 - Cross-Site Scripting (XSS)
A proof-of-concept cross-site scripting exploit for C-MOR video surveillance software 6.0104 appeared on Exploit-DB.
[webapps] CubeCart 6.7.4 - SQL
A proof-of-concept SQL injection exploit targeting CubeCart 6.7.4 was published on Exploit-DB.
[webapps] CubeCart 6.7.4 - Cross-Site Scripting
A cross-site scripting exploit targeting CubeCart 6.7.4 web applications was published on Exploit-DB as entry 52661.
[webapps] CubeCart 6.7.4 - SQL injection
A second proof-of-concept SQL injection exploit for CubeCart 6.7.4 was published on Exploit-DB.
[webapps] Linuxfabrik monitoring_plugins_6.0.0 - SSRF
A public proof-of-concept exploit for an SSRF flaw in Linuxfabrik monitoring_plugins 6.0.0 appeared on Exploit-DB.
[webapps] flyto-core 2.26.7 - Arbitrary File Write
flyto-core 2.26.7 has an arbitrary file write vulnerability with a public proof-of-concept exploit on Exploit-DB.
[webapps] Planyo_Online_Reservation_System 3.0 - Arbitrary File Read via SSRF
Exploit demonstrates arbitrary file read via SSRF in Planyo Online Reservation System 3.0.
[webapps] Apache Gravitino 1.2.1 - SSRF
Exploit-DB publishes a webapps SSRF proof-of-concept exploit targeting Apache Gravitino 1.2.1.
[webapps] Blocksy Companion 2.1.46 - RCE
Public RCE exploit published for Blocksy Companion 2.1.46, a popular WordPress plugin by CreativeThemes.
[webapps] Ray 2.56.0 - Directory Traversal & Local File Inclusion
Public exploit released for directory traversal and local file inclusion in Ray 2.56.0, the widely used distributed ML framework.