Month: March 2022

[remote] ICT Protege GX/WX 2.08 – Stored Cross-Site Scripting (XSS)

[local] Sysax FTP Automation 6.9.0 – Privilege Escalation

[remote] Ivanti Endpoint Manager 4.6 – Remote Code Execution (RCE)

[remote] iRZ Mobile Router – CSRF to RCE

[webapps] ICEHRM 31.0.0.0S – Cross-site Request Forgery (CSRF) to Account Takeover

[webapps] WordPress Plugin iQ Block Country 1.2.13 – Arbitrary File Deletion via Zip Slip (Authenticated)