>> ARCHIVE: 2020-07

UBICOD Medivision Digital Signage 1.5.1 – Cross-Site Request Forgery (Add Admin)

Port Forwarding Wizard 4.8.0 – Buffer Overflow (SEH)

PandoraFMS 7.0 NG 746 – Persistent Cross-Site Scripting

Koken CMS 0.22.24 – Arbitrary File Upload (Authenticated)

elaniin CMS – Authentication Bypass

LibreHealth 2.0.0 – Authenticated Remote Code Execution

Online Course Registration 1.0 – Unauthenticated Remote Code Execution

WordPress Plugin Email Subscribers & Newsletters 4.2.2 – ‘hash’ SQL Injection (Unauthenticated)

Bludit 3.9.2 – Directory Traversal

Calavera UpLoader 3.5 – ‘FTP Logi’ Denial of Service (PoC + SEH Overwrite)