المساعد الشخصي الرقمي

مشاهدة النسخة كاملة : exploit database

الصفحات : 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 [36] 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56
  1. [local] - Wampserver 3.0.6 - Insecure File Permissions Privilege Escalation
  2. [dos] - FTPShell Server 6.36 - '.csv' Local Denial of Service
  3. [webapps] - Joomla! Component Blog Calendar - SQL Injection
  4. [dos] - XAMPP Control Panel - Denial Of Service
  5. [local] - OpenSSH < 7.4 - 'UsePrivilegeSeparation Disabled' Forwarded Unix Domain Soc
  6. [remote] - OpenSSH < 7.4 - agent Protocol Arbitrary Library Loading
  7. [webapps] - Apache mod_session_crypto - Padding Oracle
  8. [dos] - Microsoft Internet Explorer 11 MSHTML - CPaste*Command::Convert*Bitmapto*Png
  9. [local] - Vesta Control Panel 0.9.8-16 - Local Privilege Escalation
  10. [dos] - MacOS 10.12 - Double vm_deallocate in Userspace MIG Code Use-After-Free
  11. [dos] - MacOS < 10.12.2 / iOS < 10.2 Kernel - ipc_port_t Reference Count Leak Due to
  12. [local] - MacOS < 10.12.2 / iOS < 10.2 Kernel - _kernelrpc_mach_port_insert_right_tra
  13. [local] - MacOS < 10.12.2 / iOS < 10.2 - Broken Kernel Mach Port Name uref Handling P
  14. [dos] - MacOS 10.12.1 / iOS < 10.2 - powerd Arbitrary Port Replacement
  15. [dos] - MacOS 10.12.1 / iOS < 10.2 - syslogd Arbitrary Port Replacement
  16. [dos] - MacOS Kernel 10.12.1 - Writable Privileged IOKit Registry Properties Code Exe
  17. [local] - IBM AIX 6.1/7.1/7.2 - 'Bellmail' Privilege Escalation
  18. [remote] - NETGEAR WNR2000v5 - Remote Code Execution
  19. [dos] - Microsoft Edge - SIMD.toLocaleString Uninitialized Memory (MS16-145)
  20. [dos] - Microsoft Edge - Internationalization Initialization Type Confusion (MS16-144
  21. [dos] - Microsoft Internet Explorer 11 MSHTML - CSplice*Tree*Engine::Remove*Splice Us
  22. [dos] - Google Android - WifiNative::setHotlist Stack Overflow
  23. [webapps] - WordPress Plugin 404 Redirection Manager 1.0 - SQL Injection
  24. [dos] - Google Chrome < 31.0.1650.48 - HTTP 1xx base::String*Tokenizer*T::Quick*Get*N
  25. [local] - Naenara Browser 3.5 (RedStar 3.0 Desktop) - 'JACKRABBIT' Client-Side Comman
  26. [local] - RedStar 3.0 Server - 'BEAM & RSSMON' Command Execution (Shellshock)
  27. [shellcode] - Linux/x86 - /bin/bash -c Arbitrary Command Execution Shellcode (72 byte
  28. [dos] - Orthanc DICOM Server 1.1.0 - Memory Corruption
  29. [local] - iOS 10.1.1 / macOS 10.12 16A323 XNU Kernel - set_dp_control_port Lack of Lo
  30. [dos] - OsiriX DICOM Viewer 8.0.1 - Memory Corruption
  31. [dos] - ConQuest DICOM Server 1.4.17d - Stack Buffer Overflow
  32. [dos] - DCMTK 3.6.0 storescp - Stack Buffer Overflow
  33. [papers] - [Hebrew] Digital Whisper Security Magazine #75
  34. [local] - FortiClient SSLVPN 5.4 - Credentials Disclosure
  35. [dos] - PHP 7.0 - JsonSerializable::jsonSerialize json_encode Local Denial of Service
  36. [webapps] - ZKTeco ZKAccess Security System 5.3.1 - Persistent Cross-Site Scripting
  37. [webapps] - ZKTeco ZKBioSecurity 3.0 - (visLogin.jsp) Local Authorization Bypass
  38. [webapps] - ZKTeco ZKBioSecurity 3.0 - Directory Traversal
  39. [webapps] - ZKTeco ZKBioSecurity 3.0 - (Add Superadmin) Cross-Site Request Forgery
  40. [webapps] - ZKTeco ZKBioSecurity 3.0 - Hardcoded Credentials Remote SYSTEM Code Execu
  41. [local] - ZKTeco ZKAccess Professional 3.5.3 - Insecure File Permissions Privilege Es
  42. [local] - ZKTeco ZKTime.Net 3.0.1.6 - Insecure File Permissions Privilege Escalation
  43. [dos] - PHP 7.0 - AppendIterator::append Local Denial of Service
  44. [dos] - PHP 5.0.0 - snmpset() Local Denial of Service
  45. [dos] - PHP 5.0.0 - fbird_[p]connect() Local Denial of Service
  46. [dos] - PHP 5.0.0 - snmpwalkoid() Local Denial of Service
  47. [dos] - PHP 5.0.0 - html_doc_file() Local Denial of Service
  48. [dos] - PHP 5.0.0 - hw_docbyanchor() Local Denial of Service
  49. [dos] - PHP 5.0.0 - imap_mail() Local Denial of Service
  50. [webapps] - FreePBX 13.0.35 - SQL Injection
  51. [dos] - Adobe Flash - MovieClip Transform Getter Use-After-Free
  52. [dos] - Adobe Flash - Use-After-Free When Returning Rectangle
  53. [dos] - Adobe Flash - Stage.align Setter Use-After-Free
  54. [dos] - Adobe Flash - BitmapData.copyPixels Use-After-Free
  55. [dos] - Adobe Flash - Selection.setFocus Use-After-Free
  56. [webapps] - PLC Wireless Router GPN2.4P21-C-CN - Arbitrary File Disclosure
  57. [papers] - [Persian] Android Security and Forensic Science
  58. [webapps] - HelpDeskZ 1.0.2 - Unauthenticated Shell Upload
  59. [webapps] - INTELLINET IP Camera INT-L100M20N - Unauthorized admin Credential Change
  60. [dos] - PHP 7.0 - Object Cloning Local Denial of Service
  61. [dos] - PHP 5.0.0 - domxml_open_file() Local Denial of Service
  62. [local] - NScan 0.9.1 - (Target) Buffer Overflow
  63. [dos] - Goron Webserver 2.0 - Multiple Vulnerabilities
  64. [webapps] - FreePBX 13.0.35 - Remote Command Execution
  65. [remote] - Phoenix Exploit Kit - Remote Code Execution (Metasploit)
  66. [webapps] - chatNow - Multiple Vulnerabilities
  67. [webapps] - SimplePHPQuiz - Blind SQL Injection
  68. [dos] - Eye of Gnome 3.10.2 - GMarkup Out of Bounds Write
  69. [webapps] - WordPress Mail Masta Plugin 1.0 - Local File Inclusion
  70. [dos] - ObiHai ObiPhone 1032/1062 < 5-0-0-3497 - Multiple Vulnerabilities
  71. [webapps] - WordPress 4.5.3 - Directory Traversal / Denial of Service
  72. [papers] - Hunting HTML 5 postMessage Vulnerabilities
  73. [webapps] - Sakai 10.7 - Multiple Vulnerabilities
  74. [webapps] - VideoIQ Camera - Local File Disclosure
  75. [webapps] - Honeywell IP-Camera HICC-1100PT - Local File Disclosure
  76. [webapps] - JVC IP-Camera VN-T216VPRU - Local File Disclosure
  77. [webapps] - Vanderbilt IP-Camera CCPW3025-IR, CVMW3025-IR - Local File Disclosure
  78. [webapps] - Fortigate Firewalls - Remote Code Execution (EGREGIOUSBLUNDER)
  79. [remote] - TOPSEC Firewalls - Remote Exploit (ELIGIBLEBACHELOR)
  80. [webapps] - TOPSEC Firewalls - Remote Code Execution (ELIGIBLEBOMBSHELL)
  81. [webapps] - TOPSEC Firewalls - Remote Code Execution (ELIGIBLECANDIDATE)
  82. [webapps] - TOPSEC Firewalls - Remote Code Execution (ELIGIBLECONTESTANT)
  83. [local] - Cisco ASA / PIX - Privilege Escalation (EPICBANANA)
  84. [local] - WatchGuard Firewalls - ifconfig Privilege Escalation (ESCALATEPLOWMAN)
  85. [webapps] - tcPbX - (tcpbx_lang) Local File Inclusion
  86. [webapps] - MESSOA IP Cameras (Multiple Models) - Unauthenticated Password Change
  87. [webapps] - ZYCOO IP Phone System - Remote Command Execution
  88. [local] - Windows - Fileless UAC Protection Bypass Privilege Escalation (Metasploit)
  89. [webapps] - MESSOA IP-Camera NIC990 - Auth Bypass / Configuration Download
  90. [webapps] - TOSHIBA IP-Camera IK-WP41A - Auth Bypass / Configuration Download
  91. [webapps] - C2S DVR Management IRDOME-II-C2S, IRBOX-II-C2S, DVR - Credentials Disclos
  92. [webapps] - JVC IP-Camera VN-T216VPRU - Credentials Disclosure
  93. [webapps] - Vanderbilt IP-Camera CCPW3025-IR, CVMW3025-IR - Credentials Disclosure
  94. [webapps] - SIEMENS IP Cameras (Multiple Models) - Credential Disclosure / Configurat
  95. [remote] - Cisco ASA 8.X - Authentication Bypass (EXTRABACON)
  96. [webapps] - Honeywell IP-Camera HICC-1100PT - Credentials Disclosure
  97. [webapps] - SIEMENS IP Camera CCMW1025 x.2.2.1798 - Remote Admin Credentials Change
  98. [shellcode] - Windows x86 - InitiateSystemShutdownA() Shellcode (599 bytes)
  99. [dos] - Microsoft GDI+ - EMR_EXTTEXTOUTA and EMR_POLYTEXTOUTA Heap-Based Buffer Overf
  100. [dos] - Microsoft GDI+ - ValidateBitmapInfo Invalid Pointer Arithmetic Out-of-Bounds
  101. [dos] - Microsoft GDI+ - DecodeCompressedRLEBitmap Invalid Pointer Arithmetic Out-of-
  102. [webapps] - SIEMENS IP-Camera CVMS2025-IR, CCMS2025 - Credentials Disclosure
  103. [dos] - Internet Explorer - MSHTML!CMultiReadStreamLifetimeManager::ReleaseThr eadStat
  104. [webapps] - Nagios Incident Manager 2.0.0 - Multiple Vulnerabilities
  105. [webapps] - Nagios Network Analyzer 2.2.0 - Multiple Vulnerabilities
  106. [webapps] - Nagios Log Server 1.4.1 - Multiple Vulnerabilities
  107. [webapps] - Pi-Hole Web Interface 2.8.1 - Stored XSS in Whitelist/Blacklist
  108. [webapps] - Lepton CMS 2.2.0 / 2.2.1 - PHP Code Injection
  109. [webapps] - Lepton CMS 2.2.0 / 2.2.1 - Directory Traversal
  110. [shellcode] - Windows x86 - CreateProcessA cmd.exe Shellcode (253 bytes)
  111. [shellcode] - Windows x86 - MessageBoxA Shellcode (242 bytes)
  112. [papers] - [Turkish] Drupal Coder Vulnerability Analysis & MSF Module Dev
  113. [dos] - Google Chrome 26.0.1410.43 (Webkit) - OBJECT Element Use After Free PoC
  114. [webapps] - WSO2 Carbon 4.4.5 - (Denial of Service) CSRF
  115. [webapps] - WSO2 Carbon 4.4.5 - Stored XSS
  116. [webapps] - WSO2 Carbon 4.4.5 - Local File Inclusion
  117. [webapps] - WSO2 Identity Server 5.1.0 - Multiple Vulnerabilities
  118. [dos] - Microsoft Office Word 2013,2016 - sprmSdyaTop Denial of Service (MS16-099)
  119. [webapps] - Zabbix 2.2.x, 3.0.x - SQL Injection
  120. [webapps] - GitLab - "impersonate" Feature Privilege Escalation
  121. [remote] - Samsung Smart Home Camera SNH-P-6410 - Command Injection
  122. [remote] - Easy FTP Server - "APPE" Command Buffer Overflow Remote Exploit
  123. [remote] - Apache + PHP < 5.3.12 / < 5.4.2 - Remote Code Execution (Multithreaded Sca
  124. [webapps] - FreePBX 13 / 14 - Remote Code Execution
  125. [webapps] - ColoradoFTP 1.3 Prime Edition (Build 8) - Directory Traversal
  126. [local] - EyeLock Myris 3.3.2 - SDK Service Unquoted Service Path Privilege Escalatio
  127. [webapps] - vBulletin 5.2.2 - Preauth Server Side Request Forgery (SSRF)
  128. [webapps] - EyeLock nano NXT 3.5 - Local File Disclosure
  129. [webapps] - EyeLock nano NXT 3.5 - Remote Root Exploit
  130. [dos] - SAP SAPCAR - Multiple Vulnerabilities
  131. [webapps] - WebNMS Framework Server 5.2 and 5.2 SP1 - Multiple Vulnerabilities
  132. [dos] - Microsoft Office Word 2007,2010,2013,2016 - Out-of-Bounds Read Remote Code Ex
  133. [webapps] - Nagios Network Analyzer 2.2.1 - Multiple CSRF
  134. [shellcode] - Linux/x86 - zsh TCP Bind Shell Port 9090 (96 bytes)
  135. [shellcode] - Linux/x86 - zsh Reverse TCP Shellcode port 9090 (80 bytes)
  136. [webapps] - WordPress Add From Server Plugin < 3.3.2 - (File Upload) CSRF
  137. [webapps] - phpCollab CMS 2.5 - (emailusers.php) SQL Injection
  138. [local] - Microsoft Windows Group Policy - Privilege Escalation (MS16-072)
  139. [webapps] - Navis WebAccess - SQL Injection
  140. [remote] - Drupal Module Coder < 7.x-1.3 / 7.x-2.6 - Remote Code Execution Exploit (S
  141. [webapps] - NUUO NVRmini 2 3.0.8 - (strong_user.php) Backdoor Remote Shell Access
  142. [webapps] - NUUO NVRmini 2 3.0.8 - Arbitrary File Deletion
  143. [webapps] - NUUO NVRmini 2 3.0.8 - ShellShock Remote Code Execution
  144. [webapps] - NUUO NVRmini 2 3.0.8 - Multiple OS Command Injection
  145. [webapps] - NUUO NVRmini 2 3.0.8 - Local File Disclosure
  146. [webapps] - NUUO NVRmini 2 3.0.8 - (Add Admin) CSRF
  147. [webapps] - NUUO NVRmini 2 3.0.8 - Remote Root Exploit
  148. [dos] - Kodi Web Server 16.1 - Denial of Service
  149. [webapps] - PHP Power Browse 1.2 - Directory Traversal
  150. [local] - zFTP Client 20061220 - (Connection Name) Local Buffer Overflow
  151. [webapps] - Subrion CMS 4.0.5 - SQL Injection
  152. [webapps] - NASdeluxe NDL-2400r 2.01.09 - OS Command Injection
  153. [webapps] - WordPress Count per Day Plugin 3.5.4 - Stored Cross-Site Scripting
  154. [webapps] - Davolink DV-2051 - Multiple Vulnerabilities
  155. [remote] - ntop 2.3
  156. [remote] - NUUO NVRmini2 / NVRsolo / Crystal Devices and NETGEAR ReadyNAS Surveillanc
  157. [dos] - Wireshark 2.0.0 to 2.0.4, 1.12.0 to 1.12.12 - RLC Dissector Denial of Service
  158. [dos] - Wireshark 2.0.0 to 2.0.4, 1.12.0 to 1.12.12 - WSP Dissector Denial of Service
  159. [dos] - Wireshark 2.0.0 to 2.0.4, 1.12.0 to 1.12.12 - PacketBB Dissector Denial of Se
  160. [dos] - Wireshark 2.0.0 to 2.0.4 - CORBA IDL Dissectors Denial of Service
  161. [dos] - Wireshark 2.0.0 to 2.0.4 - MMSE, WAP, WBXML, and WSP Dissectors Denial of Ser
  162. [dos] - Wireshark 1.12.0 to 1.12.12 - NDS Dissector Denial of Service
  163. [webapps] - Open Upload 0.4.2 - (Add Admin) CSRF
  164. [dos] - Halliburton LogView Pro 9.7.5 - (.cgm/.tif/.tiff/.tifh) Crash PoC
  165. [webapps] - WordPress WP Live Chat Support Plugin 6.2.03 - Stored XSS
  166. [webapps] - WordPress ALO EasyMail Newsletter Plugin 2.9.2 - (Add/Import Arbitrary Su
  167. [webapps] - WordPress Booking Calendar Plugin 6.2 - SQL Injection
  168. [papers] - [Hebrew] Digital Whisper Security Magazine #74
  169. [webapps] - PhpMyAdmin 4.6.2 - Post-Auth Remote Code Execution
  170. [dos] - WebKit - TypedArray.copyWithin Memory Corruption
  171. [webapps] - Trend Micro Deep Discovery 3.7, 3.8 SP1 (3.81), and 3.8 SP2 (3.82) - hotf
  172. [shellcode] - Linux/x86 - NetCat Bind Shell with Port (44, 52 bytes)
  173. [remote] - Easy File Sharing Web Server 7.2 - SEH Overflow (Egghunter)
  174. [remote] - Barracuda Web Application Firewall 8.0.1.008 - Post Auth Remote Root Explo
  175. [remote] - Barracuda Web App Firewall 8.0.1.008/Load Balancer 5.4.0.004 - Post Auth R
  176. [shellcode] - Windows x86 - localhost Port Scanner Shellcode (556 bytes)
  177. [webapps] - Wordpress Ultimate Product Catalog 3.9.8 - (do_shortcode via ajax) Blind
  178. [local] - mySCADAPro 7 - Local Privilege Escalation
  179. [local] - VUPlayer 2.49 - (.pls) Stack Buffer Overflow (DEP Bypass)
  180. [webapps] - AXIS Multiple Products - Authenticated Remote Command Execution via devto
  181. [remote] - Centreon 2.5.3 - Web Useralias Command Execution (Metasploit)
  182. [local] - VMware - Setuid vmware-mount Popen lsb_release Privilege Escalation (VMSA-2
  183. [remote] - Iris ID IrisAccess iCAM4000/iCAM7000 - Hardcoded Credentials Remote Shell
  184. [webapps] - Iris ID IrisAccess ICU 7000-2 - Remote Root Command Execution
  185. [webapps] - Iris ID IrisAccess ICU 7000-2 - Multiple Vulnerabilities
  186. [webapps] - PHP File Vault 0.9 - Directory Traversal
  187. [remote] - Barracuda Web App Firewall 8.0.1.007/Load Balancer 5.4.0.004 - Post Auth R
  188. [webapps] - Micro Focus Filr 2 2.0.0.421, Filr 1.2 1.2.0.846 - Multiple Vulnerabiliti
  189. [webapps] - Bellini/Supercook Wi-Fi Yumi SC200 - Multiple Vulnerabilities
  190. [webapps] - PHP gettext (gettext.php) 1.0.12 - Unauthenticated Code Execution
  191. [local] - CoolPlayer+ Portable 2.19.6 - .m3u Stack Overflow (Egghunter+ASLR bypass)
  192. [papers] - Cryptshare 3.10.1.2 - Stored XSS
  193. [webapps] - GRR Système de Gestion et de Réservations de Ressources 3.0.0-RC1 - Arbit
  194. [dos] - PHP 7.0.8, 5.6.23 and 5.5.37 - bzread() Out-of-Bounds Write
  195. [webapps] - Ubee EVW3226 Modem/Router 1.0.20 - Multiple Vulnerabilities
  196. [webapps] - Technicolor TC7200 Modem/Router STD6.02.11 - Multiple Vulnerabilities
  197. [webapps] - Hitron CGNV4 Modem/Router 4.3.9.9-SIP-UPC - Multiple Vulnerabilities
  198. [webapps] - Compal CH7465LG-LC Modem/Router CH7465LG-NCIP-4.50.18.13-NOSH - Multiple
  199. [webapps] - CodoForum 3.2.1 - SQL Injection
  200. [local] - Rapid7 AppSpider 6.12 - Local Privilege Escalation
  201. [remote] - Barracuda Web App Firewall 8.0.1.007/Load Balancer 5.4.0.004 - Remote Comm
  202. [remote] - Barracuda Spam & Virus Firewall 5.1.3.007 - Remote Command Execution (Meta
  203. [local] - MediaCoder 0.8.43.5852 - .m3u SEH Exploit
  204. [webapps] - Drupal CODER Module 2.5 - Remote Command Execution (Metasploit)
  205. [local] - mail.local(8) (NetBSD) - Local Root Exploit (NetBSD-SA2016-006)
  206. [remote] - Apache 2.4.7 & PHP
  207. [papers] - Novel contributions to the field - How I broke MySQL's codebase
  208. [remote] - TFTP Server 1.4 - WRQ Buffer Overflow Exploit (Egghunter)
  209. [shellcode] - Linux/x86-64 - Subtle Probing Reverse Shell, Timer, Burst, Password, Mu
  210. [webapps] - TeamPass Passwords Management System 2.1.26 - Arbitrary File Download
  211. [local] - Wowza Streaming Engine 4.5.0 - Local Privilege Escalation
  212. [webapps] - Wowza Streaming Engine 4.5.0 - Remote Privilege Escalation
  213. [webapps] - Wowza Streaming Engine 4.5.0 - Add Advanced Admin CSRF
  214. [remote] - OpenSSHD
  215. [webapps] - Wowza Streaming Engine 4.5.0 - Multiple XSS
  216. [webapps] - WordPress Video Player Plugin 1.5.16 - SQL Injection
  217. [shellcode] - Linux/CRISv32 - Axis Communication Connect Back Shellcode (189 bytes)
  218. [webapps] - Django CMS 3.3.0 - (Editor Snippet) Persistent XSS
  219. [remote] - Drupal RESTWS Module 7.x - Remote PHP Code Execution (Metasploit)
  220. [shellcode] - Linux/x86 - execve /bin/sh Shellcode (19 bytes)
  221. [webapps] - newsp.eu PHP Calendar Script 1.0 - User Credentials Disclosure
  222. [webapps] - NewsP Free News Script 1.4.7 - User Credentials Disclosure
  223. [papers] - Exploiting Apache James Server 2.3.2
  224. [remote] - Axis Communications MPQT/PACS 5.20.x - Server Side Include (SSI) Daemon Re
  225. [shellcode] - Linux/x86-64 - Syscall Persistent Bind Shell + (Multi-terminal) + Passw
  226. [remote] - Meinberg NTP Time Server ELX800/GPS M4x V5.30p - Remote Command Execution
  227. [WebApps] - vBulletin 5.x/4.x - Persistent XSS in AdminCP/ApiLog via xmlrpc API (Post
  228. [WebApps] - vBulletin 4.x - SQLi in breadcrumbs via xmlrpc API (Post-Auth)
  229. [Local] - Internet Explorer 11 (on Windows 10) - VBScript Memory Corruption Proof-of-
  230. [Remote] - DropBearSSHD
  231. [remote] - OpenSSHD
  232. [webapps] - Clear Voyager Hotspot IMW-C910W - Arbitrary File Disclosure
  233. [webapps] - Joomla Guru Pro (com_guru) Component - SQL Injection
  234. [shellcode] - Linux x86 Reverse Shell using Xterm ///usr/bin/xterm -display 127.1.1.
  235. [webapps] - Apache Archiva 1.3.9 - Multiple CSRF Vulnerabilities
  236. [remote] - Riverbed SteelCentral NetProfiler/NetExpress Remote Code Execution
  237. [local] - MS16-032 Secondary Logon Handle Privilege Escalation
  238. [dos] - Adobe Flash Player 22.0.0.192 - DefineSprite Memory Corruption
  239. [dos] - Adobe Flash Player 22.0.0.192 - DefineBitsJPEG2 Memory Corruption
  240. [webapps] - GSX Analyzer 10.12 and 11 - Main.swf Hardcoded Superadmin Credentials
  241. [shellcode] - Windows x86 URLDownloadToFileA()+SetFileAttributesA()+WinExec( )+ExitPro
  242. [dos] - Adobe Flash Player 22.0.0.192 - SceneAndFrameData Memory Corruption
  243. [dos] - Adobe Flash Player 22.0.0.192 - TAG Memory Corruption
  244. [webapps] - Clinic Management System - Blind SQL Injection
  245. [webapps] - Beauty Parlour & SPA Saloon Management System - Blind SQL Injection
  246. [webapps] - WordPress All in One SEO Pack Plugin 2.3.6.1 - Persistent XSS
  247. [webapps] - Belkin Router AC1200 Firmware 1.00.27 - Authentication Bypass
  248. [remote] - Ruby on Rails ActionPack Inline ERB Code Execution
  249. [local] - MS16-016 mrxdav.sys WebDav Local Privilege Escalation
  250. [remote] - Tiki Wiki 15.1 - Unauthenticated File Upload Vulnerability (msf)