Month: April 2022

[webapps] Zenario CMS 9.0.54156 – Remote Code Execution (RCE) (Authenticated)

[webapps] KLiK Social Media Website 1.0 – 'Multiple' SQLi

[remote] Kramer VIAware – Remote Code Execution (RCE) (Root)

[webapps] ICEHRM 31.0.0.0S – Cross-site Request Forgery (CSRF) to Account Deletion

[webapps] qdPM 9.2 – Cross-site Request Forgery (CSRF)

[local] Sherpa Connector Service v2020.2.20328.2050 – Unquoted Service Path

[webapps] minewebcms 1.15.2 – Cross-site Scripting (XSS)