Month: April 2018

[webapps] Frog CMS 0.9.5 – Persistent Cross-Site Scripting

[webapps] Jfrog Artifactory < 4.16 – Unauthenticated Arbitrary File Upload / Remote Command Execution

[webapps] SickRage < v2018.03.09 – Clear-Text Credentials HTTP Response

[webapps] GitList 0.6 – Unauthenticated Remote Code Execution

[webapps] MyBB Threads to Link Plugin 1.3 – Cross-Site Scripting

[local] Allok AVI to DVD SVCD VCD Converter 4.0.1217 – Buffer Overflow (SEH)

[webapps] October CMS User Plugin 1.4.5 – Persistent Cross-Site Scripting

[webapps] TP-Link Technologies TL-WA850RE Wi-Fi Range Extender – Unauthenticated Remote Reboot

[webapps] WordPress Plugin WP with Spritz 1.0 – Remote File Inclusion