>> CATEGORY: Security

Crime records Management System 1.0 – ‘Multiple’ SQL Injection (Authenticated)

COVID19 Testing Management System 1.0 – ‘Multiple’ SQL Injections

Simple Image Gallery 1.0 – Remote Code Execution (RCE) (Unauthenticated)

crossfire-server 1.9.0 – ‘SetUp()’ Remote Buffer Overflow

SonicWall NetExtender 10.2.0.300 – Unquoted Service Path

GeoVision Geowebserver 5.3.3 – LFI / XSS / HHI / RCE

NetGear D1500 V1.0.0.21_1.0.1PE – ‘Wireless Repeater’ Stored Cross-Site Scripting (XSS)

COMMAX Smart Home Ruvie CCTV Bridge DVR Service – Config Write / DoS (Unauthenticated)

CentOS Web Panel 0.9.8.1081 – Stored Cross-Site Scripting (XSS)

Simple Water Refilling Station Management System 1.0 – Remote Code Execution (RCE) through File Upload