Month: January 2019

[webapps] Lenovo R2105 – Cross-Site Request Forgery (Command Execution)

[webapps] Craigs Classified Ads CMS Theme 1.0.2 – SQL Injection

[webapps] Find a Place CMS Directory 1.5 – SQL Injection

[local] xorg-x11-server < 1.20.3 – Local Privilege Escalation (Solaris 11 inittab)

[remote] Hootoo HT-05 – Remote Code Execution (Metasploit)

[webapps] Live Call Support Widget 1.5 – Cross-Site Request Forgery (Add Admin)

[webapps] Live Call Support Widget 1.5 – Remote Code Execution / SQL Injection

[webapps] Twilio WEB To Fax Machine System Application 1.0 – SQL Injection