>> CATEGORY: Security

MaxxAudio Drivers WavesSysSvc64.exe 1.6.2.0 – Local Privilege Escalation

Listing Hub CMS 1.0 – ‘pages.php id’ SQL Injection

Find a Place CMS Directory 1.5 – ‘assets/external/data_2.php cate’ SQL Injection

Zuz Music 2.1 – ‘zuzconsole/___contact ‘ Persistent Cross-Site Scripting

Valentina Studio 9.0.4 – ‘Host’ Denial of Service (PoC)

BulletProof FTP Server 2019.0.0.50 – ‘SMTP Server’ Denial of Service (PoC)

eDirectory – SQL Injection

qdPM 9.1 – ‘search[keywords]’ Cross-Site Scripting

MISP 2.4.97 – SQL Command Execution via Command Injection in STIX Module

Master IP CAM 01 3.3.4.2103 – Remote Command Execution