>> CATEGORY: Security

ScadaBR 1.0 – Arbitrary File Upload (Authenticated) (2)

phpPgAdmin 7.13.0 – COPY FROM PROGRAM Command Execution (Authenticated)

DD-WRT 45723 – UPNP Buffer Overflow (PoC)

Zabbix 3.4.7 – Stored XSS

CourseMS 2.1 – ‘name’ Stored XSS

Openlitespeed 1.7.9 – ‘Notes’ Stored Cross-Site Scripting

GetSimple CMS 3.3.16 – Reflected XSS to RCE

Novel Boutique House-plus 3.5.1 – Arbitrary File Download

WordPress Plugin WP Super Cache 1.7.1 – Remote Code Execution (Authenticated)

TP-Link Devices – ‘setDefaultHostname’ Stored Cross-site Scripting (Unauthenticated)