Month: June 2016

phpATM 1.32 Cross Site Request Forgery / Path Disclosure

Skype For Business 2013 User Enumeration

WordPress Ultimate Product Catalog 3.8.1 Privilege Escalation

SAP NetWeaver AS JAVA 7.5 Directory Traversal

SAP NetWeaver AS JAVA 7.5 Cross Site Scripting

pfSense 2.3.1-RELEASE-p1 Squid 0.4.16_2 XSS / Log Manipulation

SAP NetWeaver AS JAVA 7.5 XXE Injection

Vicidial 2.11 Cross Site Scripting

HP StoreEver MSL6480 Tape Library 4.10 Weak Credentials / CSRF / Access Control

Papouch Backdoor Account / CSRF / Missing Authentication