Month: March 2021

[webapps] LiveZilla Server 8.0.1.0 – 'Accept-Language' Reflected XSS

[webapps] Boonex Dolphin 7.4.2 – 'width' Stored XSS

[webapps] KZTech/JatonTec/Neotel JT3500V 4G LTE CPE 2.0.1 – Command Injection (Authenticated)

[local] SOYAL 701 Client 9.0.1 – Insecure Permissions

[local] SOYAL 701 Server 9.0.1 – Insecure Permissions

[webapps] SOYAL Biometric Access Control System 5.0 – Master Code Disclosure

[webapps] SOYAL Biometric Access Control System 5.0 – 'Change Admin Password' CSRF

[local] Eclipse Mosquitto MQTT broker 2.0.9 – 'mosquitto' Unquoted Service Path

[webapps] VestaCP 0.9.8 – 'v_sftp_licence' Command Injection

[local] BRAdmin Professional 3.75 – 'BRA_Scheduler' Unquoted Service Path