Author: Milad Karimi

Country: ir

Reported research: 43

Advisories

Risk
Topic & Details
Med.
VirtualBox 7.0.16 Privilege Escalation
 Local | 2025-05-10
High
Firefox ESR 115.11 PDF.js Arbitrary JavaScript execution (CVE assigned)
 Remote | 2025-05-09
High
Tatsu 3.3.11 Unauthenticated RCE (CVE assigned)
 Remote | 2025-04-22
Med.
Nvidia GeForce 11.0.1.163 Unquoted Service Path
 Local | 2024-12-03
Med.
ESET NOD32 Antivirus 18.0.12.0 Unquoted Service Path
 Local | 2024-11-06
Med.
SolarWinds Kiwi Syslog Server 9.6.7.1 - Unquoted Service Path
 Local | 2024-08-03
Med.
ESET NOD32 Antivirus 17.2.7.0 Unquoted Service Path
 Local | 2024-07-11
High
Wordpress Plugin Membership For WooCommerce < v2.1.7 Arbitrary File Upload to Shell (Unauthenticated)
 Remote | 2024-04-08
Med.
AnyDesk 7.0.15 Unquoted Service Path
 Local | 2024-04-08
Med.
ESET Service 16.0.26.0 Unquoted Service Path
 Local | 2023-04-10
Low
IBM Websphere Application Server 7.0 Cross Site Scripting
 Remote | 2022-12-05
Low
WordPress Akismet Spam Protection 4.2.2 Cross Site Scripting
 Remote | 2022-03-24
Low
Drupal Avatar Upload 7.x-1.0-beta8 Cross Site Scripting
 Remote | 2022-03-24
Med.
Slurp 1.10.2 Format String
 Remote | 2022-02-15
Low
WordPress International SMS For Contact Form 7 Integration 1.2 CSRF (CVE assigned)
 Remote | 2022-02-15
Med.
WordPress International SMS For Contact Form 7 Integration 1.2 XSS
 Remote | 2022-02-07
Med.
Microsoft Windows 11 - 'afd.sys' Local Kernel Denial of Service
 Local | 2022-01-11
Med.
Virtual Airlines Manager 2.6.2 - 'plane_location' SQL Injection
 Remote | 2022-01-01
High
Filester V1.4.1 - Remote Command Execution
 Remote | 2020-10-29
High
Wp File Manager V6.9 - Remote Command Execution
 Remote | 2020-10-29
Low
Wordpress EZ-done File Manager 3.1.2 - Remote File Upload
 Remote | 2020-10-29
Med.
International Sms For Contact Form 7 Integration V1.2 - Cross Site Scripting
 Remote | 2020-10-28
Med.
Advanced File Manager V3.6 - Remote Command Execution
 Remote | 2020-10-28
High
Slurp 1.10.2 - SysLog Remote Format String
 Remote | 2020-07-31
Med.
جميع الحقوق محفوظة لمعهد صناعة الحياة للتدريب والاستشارات © 2018 SQL Injection Vulnerability (CVE assigned)
 Remote | 2020-05-17
Med.
School ERP Ultimate 2018 - 'fid' SQL Injection (CVE assigned)
 Remote | 2020-05-17
Med.
Powered By AryaNet - SQL Injection (CVE assigned)
 Remote | 2020-05-17
Low
KODE DESIGN STUDIO - SQL Injection (CVE assigned)
 Remote | 2020-05-17
Med.
Sysax Multi Server - BoF
 Remote | 2020-05-12
Med.
Power-eCommerce SQL Injection Vulnerability (CVE assigned)
 Remote | 2020-05-12

Do you know.. we can display your:

- Twitter Link
- Website Link
- Zone-H Link
- Description of profile
- email (let us know if you want show public)

Let's us know! submit@cxsec.org

Copyright 2025, cxsecurity.com

 

Back to Top