Month: April 2023

[webapps] ever gauzy v0.281.9 – JWT weak HMAC secret

[dos] Paradox Security Systems IPR512 – Denial Of Service

[webapps] Roxy Fileman 1.4.5 – Arbitrary File Upload

[webapps] dotclear 2.25.3 – Remote Code Execution (RCE) (Authenticated)

[remote] Microsoft Excel 365 MSO (Version 2302 Build 16.0.16130.20186) 64-bit – Remote Code Execution (RCE)

[dos] FortiRecorder 6.4.3 – Denial of Service

[webapps] Goanywhere Encryption helper 7.1.1 – Remote Code Execution (RCE)

[webapps] pfsenseCE v2.6.0 – Anti-brute force protection bypass

[webapps] Suprema BioStar 2 v2.8.16 – SQL Injection

[webapps] Restaurant Management System 1.0 – SQL Injection