Month: October 2021

[webapps] WordPress Plugin Filterable Portfolio Gallery 1.0 – 'title' Stored Cross-Site Scripting (XSS)

[webapps] WordPress Plugin Filterable Portfolio Gallery 1.0 – 'title' Stored Cross-Site Scripting (XSS)

[local] OpenClinic GA 5.194.18 – Local Privilege Escalation

[webapps] Balbooa Joomla Forms Builder 2.0.6 – SQL Injection (Unauthenticated)

[webapps] Apache HTTP Server 2.4.50 – Remote Code Execution (RCE) (2)

[webapps] Build Smart ERP 21.0817 – 'eidValue' SQL Injection (Unauthenticated)

[local] Netgear Genie 2.4.64 – Unquoted Service Path

[webapps] Engineers Online Portal 1.0 – File Upload Remote Code Execution (RCE)

[webapps] Hikvision Web Server Build 210702 – Command Injection

[local] Gestionale Open 11.00.00 – Local Privilege Escalation