Month: January 2021

[local] Knockpy 4.1.1 – CSV Injection

[webapps] Advanced Comment System 1.0 – 'ACS_path' Path Traversal

[webapps] 4images v1.7.11 – 'Profile Image' Stored Cross-Site Scripting

[webapps] Mantis Bug Tracker 2.24.3 – 'access' SQL Injection

[webapps] WordPress Core 5.2.2 – 'post previews' XSS

[webapps] sar2html 3.2.1 – 'plot' Remote Code Execution

[dos] Easy CD & DVD Cover Creator 4.13 – Denial of Service (PoC)

[local] MiniTool ShadowMaker 3.2 – 'MTAgentService' Unquoted Service Path