Sort by: Updated/Published

Filtred: Exploits
Risk Topic & Details
2025-06-20
High
Windows File Explorer Windows 11 (23H2) NTLM Hash Disclosure
 CVE Local Mohammed Idrees Banyam...
2025-06-17
Med.
Fortra GoAnywhere MFT 7.4.1 Authentication Bypass
 CVE Local @ibrahimsql
2025-06-15
High
Microsoft Windows 11 Version 24H2 Cross Device Service Elevation of Privilege
 CVE CWE Local Mohammed Idrees Banyam...
2025-06-02
Med.
ABB Cylon Aspect 3.08.03 Guest2Root Privilege Escalation
 CWE Remote Gjoko 'LiquidWorm...
2025-05-29
High
ZTE ZXV10 H201L RCE via authentication bypass
 Remote l34n
High
Invision Community 5.0.6 Remote Code Execution (RCE)
 Remote Egidio
2025-05-22
Med.
Remote Keyboard Desktop 1.0.1 Remote Code Execution (RCE)
 Remote Chokri Hammedi
Low
Drupal 11.x-dev Full Path Disclosure
 CVE Remote Milad Karimi (Ex3ption...
2025-05-19
High
Kingdia CD Extractor 3.7.12 - Buffer Overflow SEH
 Local Achilles
Med.
CrushFTP 11.3.1 Authentication Bypass
 CVE Local ibrahimsql
2025-05-15
High
WordPress SureTriggers 1.0.78 Authentication Bypass / Remote Code Execution
 CVE Remote Valentin
2025-05-13
High
TP-Link VN020 F3v(T) TT_V6.2.1021) DHCP Stack Buffer Overflow
 CVE CWE Remote Mohamed Maatallah
2025-05-09
High
Firefox ESR 115.11 PDF.js Arbitrary JavaScript execution
 CVE Remote Milad Karimi
Med.
Apache ActiveMQ 6.1.6 Denial of Service
 CVE Remote Abdualhadi khalifa
2025-05-03
High
Apache Commons Text 1.10.0 Remote Code Execution
 CVE Remote Arjun Chaudhary
2025-04-28
High
Pymatgen 2024.1 Remote Code Execution
 CVE Remote Mohammed Idrees Banyam...
2025-04-24
Med.
KiviCare Clinic & Patient Management System 3.6.4 Unauthenticated SQL Injection
 CVE CWE Remote  Gözet
2025-04-15
High
GestioIP 3.5.7 Remote Command Execution (RCE)
 CVE CWE Remote m4xth0r
High
Cacti 1.2.26 Remote Code Execution (RCE)
 CVE Remote D3Ext
2025-04-06
Med.
WordPress Pipe Audio Video and Screen Recorder 1.0.6 - Multiple Vulnerabilities
 Remote bRpsd
2025-03-22
Med.
TeamPass 3.0.0.21 SQL Injection
 CVE CWE Remote Max Meyer
2025-03-13
High
WordPress Th Shop Mania Theme 1.4.9 Missing Authorization
 CVE Remote Nxploited
Med.
WordPress NextMove Lite 2.17.0 Missing Authorization
 CVE Remote Nxploited
2025-02-28
Low
Firefox 135.0.1 bypass Download protections (PoC)
 Remote Emiliano
2025-02-19
High
InvokeAI Remote Code Execution
 Remote Local Takahiro Yokoyama
High
BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) unauthenticated Remote Code Execution
 CVE Remote sfewer
2025-02-01
High
MySchool 1.0 SQL Injection / Code Injection / XSS / CSRF
 Remote bRpsd
2025-01-02
Med.
SOPlanning 1.52.01 Remote Code Execution
 Remote Ardayfio Samuel Nii Ar...
2024-12-18
Med.
Laravel 11.0 Cross Site Scripting
 CWE Remote E1.Coders
2024-12-03
High
Asterisk AMI Originate Authenticated Remote Code Execution
 Remote h00die
2024-11-30
High
CUPS IPP Attributes LAN Remote Code Execution
 Remote Spencer McIntyre
2024-11-28
Med.
needrestart Local Privilege Escalation
 CVE CWE Local Qualys Security Adviso...
2024-11-18
High
Pyload Remote Code Execution
 CVE Remote Spencer McIntyre
2024-10-16
High
BYOB Unauthenticated Remote Code Execution
 CVE Remote Valentin Lobstein
2024-10-13
Med.
WordPress LMS 4.2.7 SQL Injection
 CVE CWE Remote Avento
2024-10-08
Med.
PHP-Nuke Top Module SQL Injection
 CWE Remote Emiliano Febbi
2024-10-07
Low
Acronis Cyber Infrastructure Default Password Remote Code Execution
 Remote h00die-gr3y
2024-09-18
Med.
Microsoft Windows TOCTOU Local Privilege Escalation
 CVE CWE Local jheysel-r7
2024-09-16
Low
SPIP BigUp 4.3.1 / 4.2.15 / 4.1.17 Unauthenticated Remote Code Execution
 Remote Valentin Lobstein
2024-09-10
High
SerComm Network Device Backdoor Detection
 Local Eloi Vanderbeken
2024-09-08
Low
OKI Printer Default Login Credential Scanner
 Remote antr6X
2024-09-03
Med.
VICIdial Multiple Authenticated SQL Injection
 CWE Remote h00die
Med.
TVT NVMS-1000 Directory Traversal
 CWE Local Dhiraj Mishra
High
IntelliNet 2.0 Remote Root
 Remote Jean Pereira
Med.
Microsoft Exchange Privilege Escalation
 CVE CWE Remote _dirkjan
2024-09-02
High
Apache Karaf Default Credentials Command Execution
 CWE Remote Nicholas Starke
2024-09-01
Med.
A10 Networks AX Loadbalancer Directory Traversal
 CWE Local xistence
Med.
WordPress NextGEN Gallery Directory Read
 Remote Roberto S. Soares
Low
SAP BusinessObjects Web User Bruteforcer
 Remote Jay Turla
2024-08-08
High
OpenMediaVault rpc.php Authenticated Cron Remote Code Execution
 Remote Brandon Perry
Med.
WordPress PayPlus Payment Gateway SQL Injection
 CWE Remote j3r1ch0123
2024-08-04
Med.
Devika v1 Path Traversal via snapshot_path
 CVE CWE Local Alperen Ergel
2024-07-22
High
Softing Secure Integration Server 1.22 Remote Code Execution
 CVE Remote mr_me
High
Ghostscript Command Execution / Format String
 CVE CWE Local Thomas Rinsma
Med.
Adobe Commerce / Magento Open Source XML Injection / User Impersonation
 Remote RedWay Security
2024-07-11
High
Atlassian Confluence Administrator Code Macro Remote Code Execution
 CVE Remote W01fh4cker
2024-07-09
Med.
Ivanti EPM RecordGoodApp SQL Injection / Remote Code Execution
 CVE CWE Remote Christophe de la Fuent...
2024-06-24
High
Payroll Management System 1.0 Remote Code Execution
 CVE Remote ShellUnease
Med.
Apache OFBiz Forgot Password Directory Traversal
 CVE CWE Remote jheysel-r7
High
Netis MW5360 Remote Command Execution
 CWE Remote h00die-gr3y
Copyright 2025, cxsecurity.com

 

Back to Top