>> ARCHIVE: 2021-06

Accela Civic Platform 21.1 – ‘successURL’ Cross-Site-Scripting (XSS)

Post-it 5.0.1 – Denial of Service (PoC)

Notex the best notes 6.4 – Denial of Service (PoC)

Accela Civic Platform 21.1 – ‘contactSeqNumber’ Insecure Direct Object References (IDOR)

GLPI 9.4.5 – Remote Code Execution (RCE)

Secure Notepad Private Notes 3.0.3 – Denial of Service (PoC)

WibuKey Runtime 6.51 – ‘WkSvW32.exe’ Unquoted Service Path

OpenEMR 5.0.1.3 – ‘manage_site_files’ Remote Code Execution (Authenticated)

TextPattern CMS 4.8.7 – Remote Command Execution (Authenticated)

Spy Emergency 25.0.650 – ‘Multiple’ Unquoted Service Path