>> CATEGORY: exploit

Tftpd32_SE version 4.60 suffers from an unquoted service path vulnerability.

WebTareas version 2.4 suffers from a remote shell upload vulnerability.

WebTareas version 2.4 suffers from multiple cross site scripting vulnerabilities.

WebTareas version 2.4 suffers from a remote blind SQL injection vulnerability. Original discovery of this issue in this version is attributed to Behrad Taher in May of 2022. Related CVE…

Suprema BioStar 2 version 2.8.16 suffers from a remote SQL injection vulnerability.

Suprema BioStar 2 version 2.8.16 suffers from a remote SQL injection vulnerability.

Linksys AX3200 version 1.1.00 suffers from a remote command injection vulnerability.

wkhtmltopdf version 0.12.6 suffers from a server-side request forgery vulnerability.

MAN-EAM-0003 version 3.2.4 suffers from an XML external entity injection vulnerability.

Bitbucket version 7.0.0 suffers from a remote command execution vulnerability.