>> CATEGORY: Security

Textpattern CMS 4.6.2 – ‘body’ Persistent Cross-Site Scripting

BACnet Test Server 1.01 – Remote Denial of Service (PoC)

Karel IP Phone IP1211 Web Management Panel – Directory Traversal

EasyPMS 1.0.0 – Authentication Bypass

MOVEit Transfer 11.1.1 – ‘token’ Unauthenticated SQL Injection

SpamTitan 7.07 – Unauthenticated Remote Code Execution

MedDream PACS Server 6.8.3.751 – Remote Code Execution (Authenticated)

Photo Share Website 1.0 – Persistent Cross-Site Scripting

BrightSign Digital Signage Diagnostic Web Server 8.2.26 – Server-Side Request Forgery (Unauthenticated)

CMS Made Simple 2.2.14 – Persistent Cross-Site Scripting (Authenticated)