Month: June 2021

[webapps] Simple Client Management System 1.0 – 'uemail' SQL Injection (Unauthenticated)

[webapps] Seeddms 5.1.10 – Remote Command Execution (RCE) (Authenticated)

[local] SAPSprint 7.60 – 'SAPSprint' Unquoted Service Path

[webapps] Huawei dg8045 – Authentication Bypass

[webapps] TP-Link TL-WR841N – Command Injection

[webapps] Adobe ColdFusion 8 – Remote Command Execution (RCE)

[webapps] VMware vCenter Server RCE 6.5 / 6.7 / 7.0 – Remote Code Execution (RCE) (Unauthenticated)