Month: April 2022

[webapps] Scriptcase 9.7 – Remote Code Execution (RCE)

[webapps] Easy Appointments 1.4.2 – Information Disclosure

[remote] Zyxel NWA-1100-NH – Command Injection

[webapps] WordPress Plugin Motopress Hotel Booking Lite 4.2.4 – SQL Injection

[local] Microsoft Exchange Mailbox Assistants 15.0.847.40 – 'Service MSExchangeMailboxAssistants' Unquoted Service Path

[local] EaseUS Data Recovery – 'ensserver.exe' Unquoted Service Path

[local] Microsoft Exchange Active Directory Topology 15.0.847.40 – 'Service MSExchangeADTopology' Unquoted Service Path

[local] PTPublisher v2.3.4 – Unquoted Service Path

[remote] ManageEngine ADSelfService Plus 6.1 – User Enumeration

[webapps] WordPress Plugin Videos sync PDF 1.7.4 – Stored Cross Site Scripting (XSS)