Month: October 2020

[webapps] Hostel Management System 2.1 – Cross Site Scripting (Multiple Fields)

[webapps] Jenkins 2.63 – Sandbox bypass in pipeline: Groovy plug-in

[webapps] HiSilicon Video Encoders – Unauthenticated RTSP buffer overflow (DoS)

[webapps] HiSilicon video encoders – RCE via unauthenticated upload of malicious firmware

[webapps] HiSilicon Video Encoders – Full admin access via backdoor password

[webapps] HiSilicon Video Encoders – Unauthenticated file disclosure via path traversal

[webapps] HiSilicon Video Encoders – RCE via unauthenticated command injection

[webapps] Online Discussion Forum Site 1.0 – XSS in Messaging System

[webapps] Online Job Portal 1.0 – Cross Site Scripting (Stored)

[webapps] Online Student's Management System 1.0 – Remote Code Execution (Authenticated)