Category: Security

[webapps] ManageEngine Network Configuration Manager 12.2 – 'apiKey' SQL Injection

[local] NEOWISE CARBONFTP 1.4 – Weak Password Encryption

[local] Easy XML Editor 1.7.8 – XML External Entity Injection

[webapps] Adive Framework 2.0.8 – Persistent Cross-Site Scripting

[dos] Sysax Multi Server 5.50 – Denial of Service (PoC)

[webapps] Centreon 19.04 – Authenticated Remote Code Execution (Metasploit)

[local] Torrent FLV Converter 1.51 Build 117 – Stack Oveflow (SEH partial overwrite)

[dos] APKF Product Key Finder 2.5.8.0 – 'Name' Denial of Service (PoC)

[webapps] WordPress Plugin InfiniteWP Client 1.9.4.5 – Authentication Bypass

[local] Trend Micro Maximum Security 2019 – Arbitrary Code Execution