The Windscribe VPN client application for Windows makes use of a Windows service WindscribeService.exe which exposes a named pipe \.pipeWindscribeService allowing execution of programs with elevated privileges. Windscribe versions prior…
>> ARCHIVE: 2020-02
AbsoluteTelnet 11.12 – ‘license name’ Denial of Service (PoC)
Cisco Data Center Network Manager 11.2.1 – ‘LanFabricImpl’ Command Injection
AbsoluteTelnet 11.12 – “license name” Denial of Service (PoC)
Cisco Data Center Network Manager 11.2.1 – ‘getVmHostData’ SQL Injection
Online Job Portal 1.0 – ‘user_email’ SQL Injection
VIM 8.2 – Denial of Service (PoC)
Cisco Data Center Network Manager 11.2 – Remote Code Execution
Ecommerce Systempay 1.0 – Production KEY Brute Force
Online Job Portal 1.0 – Cross Site Request Forgery (Add User)