Month: April 2023

[webapps] WebsiteBaker v2.13.3 – Cross-Site Scripting (XSS)

[webapps] ZCBS/ZBBS/ZPBS v4.14k – Reflected Cross-Site Scripting (XSS)

[dos] Microsoft Windows 11 – 'cmd.exe' Denial of Service

[webapps] X2CRM v6.6/6.9 – Stored Cross-Site Scripting (XSS) (Authenticated)

[webapps] X2CRM v6.6/6.9 – Reflected Cross-Site Scripting (XSS) (Authenticated)

[local] Lucee Scheduled Job v1.0 – Command Execution

[webapps] ENTAB ERP 1.0 – Username PII leak

[webapps] Icinga Web 2.10 – Arbitrary File Disclosure

[local] Google Chrome 109.0.5414.74 – Code Execution via missing lib file (Ubuntu)

[webapps] Altenergy Power Control Software C1.2.5 – OS command injection