Category: Security

[webapps] Grandstream UCM6200 Series CTI Interface – 'user_password' SQL Injection

[remote] DLINK DWL-2600 – Authenticated Remote Command Injection (Metasploit)

[dos] Odin Secure FTP Expert 7.6.3 – 'Site Info' Denial of Service (PoC)

[webapps] Joomla! com_fabrik 3.9.11 – Directory Traversal

[remote] Multiple DrayTek Products – Pre-authentication Remote Root Code Execution

[webapps] ECK Hotel 1.0 – Cross-Site Request Forgery (Add Admin)

[local] Easy RM to MP3 Converter 2.7.3.700 – 'Input' Local Buffer Overflow (SEH)

[dos] Everest 5.50.2100 – 'Open File' Denial of Service (PoC)

[webapps] TP-Link Archer C50 3 – Denial of Service (PoC)

[webapps] Centreo 19.10.8 – 'DisplayServiceStatus' Remote Code Execution