DynPG 4.9.1 – Persistent Cross-Site Scripting (Authenticated)
>> ARCHIVE: 2020-10
DynPG 4.9.1 – Persistent Cross-Site Scripting (Authenticated)
Kentico CMS 9.0-12.0.49 – Persistent Cross Site Scripting
The Karel IP Phone IP1211 web management panel suffers from a directory traversal vulnerability.
EasyPMS version 1.0.0 suffers from an authentication bypass vulnerability.
Liman version 0.7 suffers from a cross site request forgery vulnerability.
BACNet Test Server version 1.01 suffers from a denial of service vulnerability when sending a malformed BVLC Length UDP packet to port 47808 which causes the application to crash.
A security vulnerability affecting GoAhead versions 2 to 5 has been identified when using Digest authentication over HTTP. The HTTP Digest Authentication in the GoAhead web server does not completely…
D-Link DSR-250N 3.12 – Denial of Service (PoC)
SEO Panel 4.6.0 – Remote Code Execution
Krpano Panorama Viewer versions 1.20.8 and below suffer from a cross site scripting vulnerability.