>> ARCHIVE: 2017-09

EE 4GEE wireless router version EE60_00_05.00_25 suffers from cross site request forgery, cross site scripting, and information disclosure vulnerabilities.

Roteador Wireless Intelbras WRN150 router suffers from a cross site scripting vulnerability.

CMS Showcase version 1.0 suffers from multiple cross site scripting vulnerabilities.

WordPress Fitness Trainer – Training Membership plugin versions 1.0.8 and below suffer from a cross site scripting vulnerability.

D-Link 850L suffers from cross site scripting, access bypass, backdoor, bruteforcing, information disclosure, remote code execution, and denial of service vulnerabilities. Basically, do not use this device unless you want…

Utilizing Docker via unprotected tcp socket (2375/tcp, maybe 2376/tcp with tls but without tls-auth), an attacker can create a Docker container with the ‘/’ path mounted with read/write permissions on…

Subrion CMS version 4.1.5 suffers from a cross site scripting vulnerability.