Month: April 2020

[remote] Neowise CarbonFTP 1.4 – Insecure Proprietary Password Encryption

[webapps] P5 FNIP-8x16A FNIP-4xSH 1.0.20 – Cross-Site Request Forgery (Add Admin)

[webapps] jizhi CMS 1.6.7 – Arbitrary File Download

[webapps] NSClient++ 0.5.2.35 – Authenticated Remote Code Execution

[local] Oracle Solaris Common Desktop Environment 1.6 – Local Privilege Escalation

[webapps] IQrouter 3.3.1 Firmware – Remote Code Execution

[webapps] CSZ CMS 1.2.7 – 'title' HTML Injection

[remote] Unraid 6.8.0 – Auth Bypass PHP Code Execution (Metasploit)