Category: Security

[webapps] TemaTres 3.0 – 'value' Persistent Cross-site Scripting

[local] ASUS HM Com Service 1.00.31 – 'asHMComSvc' Unquoted Service Path

[webapps] Lexmark Services Monitor 2.27.4.0.39 – Directory Traversal

[webapps] Crystal Live HTTP Server 6.01 – Directory Traversal

[dos] Open Proficy HMI-SCADA 5.0.0.25920 – 'Password' Denial of Service (PoC)

[local] NCP_Secure_Entry_Client 9.2 – Unquoted Service Paths

[local] MobileGo 8.5.0 – Insecure File Permissions

[webapps] Centova Cast 3.2.11 – Arbitrary File Download

[webapps] TemaTres 3.0 – Cross-Site Request Forgery (Add Admin)

[dos] Foscam Video Management System 1.1.4.9 – 'Username' Denial of Service (PoC)