Month: April 2023

[webapps] Rukovoditel 3.3.1 – Remote Code Execution (RCE)

[remote] Franklin Fueling Systems TS-550 – Exploit and Default Password

[remote] Schneider Electric v1.0 – Directory traversal & Broken Authentication

[webapps] NotrinosERP 0.7 – Authenticated Blind SQL Injection

[webapps] ChurchCRM 4.5.1 – Authenticated SQL Injection

[remote] IBM Aspera Faspex 4.4.1 – YAML deserialization (RCE)

[remote] Tenda N300 F3 12.01.01.48 – Malformed HTTP Request Header Processing

[webapps] MAC 1200R – Directory Traversal