Month: February 2022

[webapps] WordPress Plugin Error Log Viewer 1.1.1 – Arbitrary File Clearing (Authenticated)

[webapps] Network Video Recorder NVR304-16EP – Reflected Cross-Site Scripting (XSS) (Unauthenticated)

[local] TeamSpeak 3.5.6 – Insecure File Permissions

[remote] H3C SSL VPN – Username Enumeration

[webapps] Simple Student Quarterly Result/Grade System 1.0 – SQLi Authentication Bypass

[webapps] ServiceNow – Username Enumeration

[webapps] Multi-Vendor Online Groceries Management System 1.0 – 'id' Blind SQL Injection

[local] Emerson PAC Machine Edition 9.80 Build 8695 – 'TrapiServer' Unquoted Service Path