Category: Security

[local] Simple Startup Manager 1.17 – 'File' Local Buffer Overflow (PoC)

[local] Sonar Qube 8.3.1 – 'SonarQube Service' Unquoted Service Path

[webapps] CMSUno 1.6 – Cross-Site Request Forgery (Change Admin Password)

[webapps] RiteCMS 2.2.1 – Remote Code Execution

[webapps] Wing FTP Server 6.3.8 – Remote Code Execution (Authenticated)

[webapps] SuperMicro IPMI WebInterface 03.40 – Cross-Site Request Forgery (Add Admin)

[webapps] Zyxel Armor X1 WAP6806 – Directory Traversal

[webapps] BSA Radar 1.6.7234.24750 – Local File Inclusion

[webapps] Trend Micro Web Security Virtual Appliance 6.5 SP2 Patch 4 Build 1901 – Remote Code Execution (Metasploit)

[webapps] Park Ticketing Management System 1.0 – Authentication Bypass