>> ARCHIVE: 2021-10

WordPress Plugin TaxoPress 3.0.7.1 – Stored Cross-Site Scripting (XSS) (Authenticated)

Netgear Genie 2.4.64 – Unquoted Service Path

Engineers Online Portal 1.0 – ‘id’ SQL Injection

Engineers Online Portal 1.0 – ‘multiple’ Authentication Bypass

Engineers Online Portal 1.0 – ‘multiple’ Stored Cross-Site Scripting (XSS)

Gestionale Open 11.00.00 – Local Privilege Escalation

Online Event Booking and Reservation System 1.0 – ‘reason’ Stored Cross-Site Scripting (XSS)

Balbooa Joomla Forms Builder 2.0.6 – SQL Injection (Unauthenticated)

OpenClinic GA 5.194.18 – Local Privilege Escalation

Build Smart ERP 21.0817 – ‘eidValue’ SQL Injection (Unauthenticated)