Month: April 2018

[webapps] Match Clone Script 1.0.4 – Cross-Site Scripting

[webapps] Geist WatchDog Console 3.2.2 – Multiple Vulnerabilities

[webapps] Rvsitebuilder CMS – Database Backup Download

[webapps] Lutron Quantum 2.0 – 3.2.243 – Information Disclosure

[local] Brave Browser < 0.13.0 – 'long alert() argument' Denial of Service

[remote] Drupal < 8.3.9 / < 8.4.6 / < 8.5.1 – 'Drupalgeddon2' Remote Code Execution (Metasploit)

[local] Brave Browser < 0.13.0 – 'window.close(self)' Denial of Service

[remote] D-Link DIR-615 Wireless Router – Persistent Cross Site Scripting

[webapps] Joomla! Component jDownloads 3.2.58 – Cross Site Scripting