Shrew Soft VPN Client 2.2.2 – ‘iked’ Unquoted Service Path
>> AUTHOR: deepcore
Shrew Soft VPN Client 2.2.2 – ‘iked’ Unquoted Service Path
Technicolor TD5130.2 with firmware version OI_Fw_V20 suffers from a remote command execution vulnerability.
Technicolor versions TC7300.B0 through STFA.51.20 suffer from a persistent cross site scripting vulnerability.
gSOAP version 2.8 suffers from a directory traversal vulnerability.
Fastweb Fastgate version 0.00.81 suffers from a remote code execution vulnerability.
Scanguard versions through 2019-11-12 on Windows has insecure permissions for the installation directory, leading to privilege escalation via a trojan horse executable file.
Siemens Desigo PX version 6.00 remote denial of service exploit.
An issue was discovered in CMS Made Simple version 2.2.8. In the module DesignManager (in the files action.admin_bulk_css.php and action.admin_bulk_template.php), with an unprivileged user with Designer permission, it is possible…
Siemens Desigo PX 6.00 – Denial of Service (PoC)
oXygen XML Editor 21.1.1 – XML External Entity Injection