webapps – Torchsec

Exploit/Advisories

Zabbix 3.4.7 – Stored XSS

April 1st, 2021 | 🕒

https://www.ispeech.org # Exploit Title: Zabbix 3.4.7 - Stored XSS # Date: 30-03-2021 # Exploit Author: Radmil Gazizov # Vendor Homepage:

Exploit/Advisories

phpPgAdmin 7.13.0 – COPY FROM PROGRAM Command Execution (Authenticated)

April 1st, 2021 | 🕒

Convert Text to Speech # Exploit Title: phpPgAdmin 7.13.0 - COPY FROM PROGRAM Command Execution (Authenticated) # Date: 29/03/2021 #

Exploit/Advisories

ScadaBR 1.0 – Arbitrary File Upload (Authenticated) (2)

April 1st, 2021 | 🕒

TTS # Exploit Title: ScadaBR 1.0 - Arbitrary File Upload (Authenticated) (2) # Date: 04/21 # Exploit Author: Fellipe Oliveira

Exploit/Advisories

ScadaBR 1.0 – Arbitrary File Upload (Authenticated) (1)

April 1st, 2021 | 🕒

iSpeech.org # Exploit Title: ScadaBR 1.0 - Arbitrary File Upload (Authenticated) (1) # Date: 03/2021 # Exploit Author: Fellipe Oliveira

Exploit/Advisories

Latrix 0.6.0 – ‘txtaccesscode’ SQL Injection

April 1st, 2021 | 🕒

iSpeech.org # Exploit Title: Latrix 0.6.0 – 'txtaccesscode' SQL Injection # Date: 03/30/2021 # Exploit Author: cptsticky # Vendor Homepage:

Exploit/Advisories

Regis Inventory And Monitoring System 1.0 – ‘Item List’ Stored XSS

March 30th, 2021 | 🕒

Text to Speech # Title: Regis Inventory And Monitoring System 1.0 - 'Item List' Stored XSS # Exploit Author: George

Exploit/Advisories

GetSimple CMS Custom JS Plugin 0.1 – CSRF to Persistent XSS

March 30th, 2021 | 🕒

TTS Demo # Exploit Title: GetSimple CMS Custom JS Plugin 0.1 - CSRF to Persistent XSS # Exploit Author: Abhishek

Exploit/Advisories

SyncBreeze 10.1.16 – XML Parsing Stack-based Buffer Overflow

March 30th, 2021 | 🕒

https://www.ispeech.org/text.to.speech # Exploit Title: SyncBreeze 10.1.16 - XML Parsing Stack-based Buffer Overflow # Date: 03/27/2021 # Author: Filipe Oliveira -

Exploit/Advisories

GetSimple CMS 3.3.16 – Reflected XSS to RCE

March 30th, 2021 | 🕒

Text to Voice # Exploit Title: GetSimple CMS 3.3.16 - Reflected XSS to RCE # Exploit Author: Bobby Cooke (boku)

Exploit/Advisories

Openlitespeed 1.7.9 – ‘Notes’ Stored Cross-Site Scripting

March 30th, 2021 | 🕒

iSpeech # Exploit Title: Openlitespeed 1.7.9 - 'Notes' Stored Cross-Site Scripting # Date: 3/30/2021 # Exploit Author: cmOs # Vendor

Exploit/Advisories

Budget Management System 1.0 – ‘Budget title’ Stored XSS

March 30th, 2021 | 🕒

iSpeech # Exploit Title: Budget Management System 1.0 - 'Budget title' Stored XSS # Exploit Author: Jitendra Kumar Tripathi #

Exploit/Advisories

Equipment Inventory System 1.0 – ‘multiple’ Stored XSS

March 30th, 2021 | 🕒

iSpeech.org # Exploit Title: Equipment Inventory System 1.0 - 'multiple' Stored XSS # Exploit Author: Jitendra Kumar Tripathi # Vendor

Exploit/Advisories

Concrete5 8.5.4 – ‘name’ Stored XSS

March 29th, 2021 | 🕒

Convert Text to Speech # Exploit Title: Concrete5 8.5.4 - 'name' Stored XSS # Date: 2021-01 # Exploit Author: Quadron

Exploit/Advisories

TP-Link Devices – ‘setDefaultHostname’ Stored Cross-site Scripting (Unauthenticated)

March 29th, 2021 | 🕒

iSpeech # Exploit Title: TP-Link Devices - 'setDefaultHostname' Stored Cross-site Scripting (Unauthenticated) # Date: 24-07-2020 # Exploit Author: Smriti Gaba,

Browsing the "webapps" Tag

Exploit/Advisories

Zabbix 3.4.7 – Stored XSS

Exploit/Advisories

phpPgAdmin 7.13.0 – COPY FROM PROGRAM Command Execution (Authenticated)

Exploit/Advisories

ScadaBR 1.0 – Arbitrary File Upload (Authenticated) (2)

Exploit/Advisories

ScadaBR 1.0 – Arbitrary File Upload (Authenticated) (1)

Exploit/Advisories

Latrix 0.6.0 – ‘txtaccesscode’ SQL Injection

Exploit/Advisories

Regis Inventory And Monitoring System 1.0 – ‘Item List’ Stored XSS

Exploit/Advisories

GetSimple CMS Custom JS Plugin 0.1 – CSRF to Persistent XSS

Exploit/Advisories

SyncBreeze 10.1.16 – XML Parsing Stack-based Buffer Overflow

Exploit/Advisories

GetSimple CMS 3.3.16 – Reflected XSS to RCE

Exploit/Advisories

Openlitespeed 1.7.9 – ‘Notes’ Stored Cross-Site Scripting

Exploit/Advisories

Budget Management System 1.0 – ‘Budget title’ Stored XSS

Exploit/Advisories

Equipment Inventory System 1.0 – ‘multiple’ Stored XSS

Exploit/Advisories

Concrete5 8.5.4 – ‘name’ Stored XSS

Exploit/Advisories

TP-Link Devices – ‘setDefaultHostname’ Stored Cross-site Scripting (Unauthenticated)

🌟 Your Account

🔔 Email Subscriptions

Get new posts by email

Donate Via Wallets

Popular

Gloss

☕️Social Media

👥Members

🌍 Forum Groups