Month: June 2018

[webapps] Liferay Portal < 7.0.4 – Server-Side Request Forgery

[webapps] Travel Agency 1.1 – 'cid' SQL Injection

[webapps] WordPress Plugin iThemes Security < 7.0.3 – SQL Injection

[webapps] Ecessa WANWorx WVR-30 < 10.7.4 – Cross-Site Request Forgery (Add Superuser)

[webapps] Ecessa Edge EV150 10.7.4 – Cross-Site Request Forgery (Add Superuser)

[webapps] AsusWRT RT-AC750GF – Cross-Site Request Forgery (Change Admin Password)

[dos] DIGISOL DG-BR4000NG – Buffer Overflow (PoC)

[webapps] Ecessa ShieldLink SL175EHQ < 10.7.4 – Cross-Site Request Forgery (Add Superuser)

[papers] Security of Modern Bluetooth Keyboards