Posts

Macro Expert 4.7 Unquoted Service Path

WordPress Enfold Theme 4.8.3 Cross Site Scripting

Online Motorcycle (Bike) Rental System 1.0 SQL Injection

Dolibarr ERP / CRM 14.0.2 Cross Site Scripting / Privilege Escalation

Backdoor.Win32.LanaFTP.k Heap Corruption

Backdoor.Win32.LanFiltrator.11.b Code Execution

Mitsubishi Electric / INEA SmartRTU Source Code Disclosure

Mitsubishi Electric / INEA SmartRTU Cross Site Scripting

Virus.Win32.Ipamor.c Unauthenticated Remote System Reboot

Engineers Online Portal 1.0 SQL Injection

Trojan-Proxy.Win32.Ranky.z Unauthenticated Open Proxy

WordPress Duplicator 1.3.26 Arbitrary File Read

Worm.Win32.Runfer.bpo Unquoted Service Path

Plastic SCM 10.0.16.5622 Insecure Direct Object Reference

Trojan-Proxy.Win32.Ranky.dh Unauthenticated Open Proxy

Company's Recruitment Management System 1.0 Cross Site Request Forgery

Company's Recruitment Management System 1.0 Cross Site Scripting

Worm.Win32.Fasong.c Unquoted Service Path

Trojan-Spy.Win32.Ardamax.ocx Insecure Permissions

Support Board 3.3.4 Cross Site Scripting

i-Panel Administration System 2.0 Cross Site Scripting

WebKit DOMWindow::open Heap Use-After-Free

WebKit EventHandler::keyEvent Heap Use-After-Free

WebKit PointerCaptureController::processPendingPointerCapture Heap Use-After-Free

Yellowfin Cross Site Scripting / Insecure Direct Object Reference

IFSC Code Finder Project 1.0 SQL Injection

TextPattern CMS 4.8.7 Shell Upload

SolarWinds Kiwi CatTools 3.11.8 Unquoted Service Path

myfactory.FMS 7.1-911 Cross Site Scripting

Sonicwall SonicOS 7.0 Host Header Injection

Apache HTTP Server 2.4.50 Path Traversal / Code Execution

Keycloak 12.0.1 Server-Side Request Forgery

Alchemy CMS 6.0.0 Arbitrary File Upload

Simple Payroll System 1.0 SQL Injection

Logitech Media Server 8.2.0 Cross Site Scripting

Lifestyle Store 1.0 Cross Site Scripting

Student Quarterly Grading System 1.0 Cross Site Scripting

Simple Issue Tracker System 1.0 SQL Injection

Pharmacy Point Of Sale System 1.0 Cross Site Request Forgery

Moodle Admin Shell Upload

Moodle SpellChecker Path Authenticated Remote Command Execution

Moodle Teacher Enrollment Privilege Escalation / Remote Code Execution

Moodle Authenticated Spelling Binary Remote Code Execution

Cypress Solutions CTM-200 2.7.1 Root Remote OS Command Injection

Cypress Solutions CTM-200/CTM-ONE Hard-Coded Credentials Remote Root

Aviatrix Controller 6.x Path Traversal / Code Execution

Simple Online College Entrance Exam System 1.0 SQL Injection

Cmder Console Emulator 1.3.18 Denial Of Service

Online Employees Work From Home Attendance System 1.0 SQL Injection