>> ARCHIVE: 2020-02

CandidATS 2.1.0 – Cross-Site Request Forgery (Add Admin)

AMSS++ 4.7 – Backdoor Admin Account

Quick N Easy Web Server 3.3.8 – Denial of Service (PoC)

Cacti 1.2.8 – Remote Code Execution

Aptina AR0130 960P 1.3MP Camera – Remote Configuration Disclosure

SecuSTATION SC-831 HD Camera – Remote Configuration Disclosure

ATutor 2.2.4 – ‘id’ SQL Injection

DotNetNuke 9.5 – File Upload Restrictions Bypass

DotNetNuke 9.5 – Persistent Cross-Site Scripting

eLection 2.0 – ‘id’ SQL Injection