Month: September 2021

[local] Facebook ParlAI 1.0.0 – Deserialization of Untrusted Data in parlai

[webapps] ECOA Building Automation System – Weak Default Credentials

[webapps] ECOA Building Automation System – Path Traversal Arbitrary File Upload

[webapps] WordPress Plugin Download From Files 1.48 – Arbitrary File Upload

[webapps] ECOA Building Automation System – Arbitrary File Deletion

[webapps] ECOA Building Automation System – Local File Disclosure

[local] ECOA Building Automation System – Missing Encryption Of Sensitive Information

[webapps] ECOA Building Automation System – Remote Privilege Escalation

[webapps] ECOA Building Automation System – Hidden Backdoor Accounts and backdoor() Function

[remote] ECOA Building Automation System – Hard-coded Credentials SSH Access