Quick N Easy Web Server 3.3.8 – Denial of Service (PoC)
>> AUTHOR: deepcore
Quick N Easy Web Server 3.3.8 – Denial of Service (PoC)
AMSS++ 4.7 – Backdoor Admin Account
CandidATS 2.1.0 – Cross-Site Request Forgery (Add Admin)
http://nbc.dip.go.th/rx.html notified by ifactoryx
http://nec.dip.go.th/rx.html notified by ifactoryx
AMSS++ version 4.31 suffers from a remote SQL injection vulnerability.
D-Link DGS-1250 suffers from a header injection vulnerability that can be leveraged through cross site scripting.
Online Birth Certificate System version 1.0 suffers from a persistent cross site scripting vulnerability.
Open-Xchange App Suite and Documents versions 7.10.2 and below suffer from multiple server-side request forgery vulnerabilities.
This Metasploit module exploits a command injection in OpenNetAdmin between versions 8.5.14 and 18.1.1.