Month: February 2020

[webapps] CandidATS 2.1.0 – Cross-Site Request Forgery (Add Admin)

[webapps] AMSS++ 4.7 – Backdoor Admin Account

[dos] Quick N Easy Web Server 3.3.8 – Denial of Service (PoC)

[webapps] Cacti 1.2.8 – Remote Code Execution

[webapps] Aptina AR0130 960P 1.3MP Camera – Remote Configuration Disclosure

[webapps] SecuSTATION SC-831 HD Camera – Remote Configuration Disclosure

[webapps] ATutor 2.2.4 – 'id' SQL Injection

[webapps] DotNetNuke 9.5 – File Upload Restrictions Bypass

[webapps] DotNetNuke 9.5 – Persistent Cross-Site Scripting

[webapps] eLection 2.0 – 'id' SQL Injection