Month: July 2020

[webapps] UBICOD Medivision Digital Signage 1.5.1 – Cross-Site Request Forgery (Add Admin)

[local] Port Forwarding Wizard 4.8.0 – Buffer Overflow (SEH)

[webapps] PandoraFMS 7.0 NG 746 – Persistent Cross-Site Scripting

[webapps] Koken CMS 0.22.24 – Arbitrary File Upload (Authenticated)

[webapps] elaniin CMS – Authentication Bypass

[webapps] LibreHealth 2.0.0 – Authenticated Remote Code Execution

[webapps] Online Course Registration 1.0 – Unauthenticated Remote Code Execution

[webapps] WordPress Plugin Email Subscribers & Newsletters 4.2.2 – 'hash' SQL Injection (Unauthenticated)

[webapps] Bludit 3.9.2 – Directory Traversal

[dos] Calavera UpLoader 3.5 – 'FTP Logi' Denial of Service (PoC + SEH Overwrite)