Month: July 2021

[webapps] Phone Shop Sales Managements System 1.0 – 'Multiple' Arbitrary File Upload to Remote Code Execution

[webapps] WordPress Plugin Anti-Malware Security and Bruteforce Firewall 4.20.59 – Directory Traversal

[webapps] perfexcrm 1.10 – 'State' Stored Cross-site scripting (XSS)

[webapps] Visual Tools DVR VX16 4.2.28.0 – OS Command Injection (Unauthenticated)

[webapps] Phone Shop Sales Managements System 1.0 – Authentication Bypass (SQLi)

[webapps] Visual Tools DVR VX16 4.2.28 – Local Privilege Escalation

[webapps] Exam Hall Management System 1.0 – Unrestricted File Upload (Unauthenticated)

[webapps] Pallets Werkzeug 0.15.4 – Path Traversal

[webapps] Billing System Project 1.0 – Remote Code Execution (RCE) (Unauthenticated)

[webapps] Netgear DGN2200v1 – Remote Command Execution (RCE) (Unauthenticated)