Month: January 2022

[webapps] Library System in PHP 1.0 – 'publisher name' Stored Cross-Site Scripting (XSS)

[webapps] SAFARI Montage 8.5 – Reflected Cross Site Scripting (XSS)

[webapps] WordPress Plugin The True Ranker 2.2.2 – Arbitrary File Read (Unauthenticated)

[remote] ConnectWise Control 19.2.24707 – Username Enumeration

[webapps] RiteCMS 3.1.0 – Remote Code Execution (RCE) (Authenticated)

[webapps] RiteCMS 3.1.0 – Arbitrary File Deletion (Authenticated)

[webapps] RiteCMS 3.1.0 – Arbitrary File Overwrite (Authenticated)

[webapps] CMSimple 5.4 – Cross Site Scripting (XSS)

[webapps] WordPress Plugin Contact Form Entries 1.1.6 – Cross Site Scripting (XSS) (Unauthenticated)

[dos] Siemens S7 Layer 2 – Denial of Service (DoS)