Rukovoditel 3.3.1 – Remote Code Execution (RCE)
>> ARCHIVE: 2023-04
Rukovoditel 3.3.1 – Remote Code Execution (RCE)
Franklin Fueling Systems TS-550 – Exploit and Default Password
Schneider Electric v1.0 – Directory traversal & Broken Authentication
NotrinosERP 0.7 – Authenticated Blind SQL Injection
ChurchCRM 4.5.1 – Authenticated SQL Injection
IBM Aspera Faspex 4.4.1 – YAML deserialization (RCE)
Tenda N300 F3 12.01.01.48 – Malformed HTTP Request Header Processing
MAC 1200R – Directory Traversal
Universal Media Server version 13.2.1 suffers from a cross site scripting vulnerability.
PhotoShow version 3.0 suffers from a remote code execution vulnerability.