Category: Security

[webapps] Bludit 4.0.0-rc-2 – Account takeover

[webapps] Sielco Analog FM Transmitter 2.12 – 'id' Cookie Brute Force Session Hijacking

[webapps] Sielco PolyEco Digital FM Transmitter 2.0.6 – Account Takeover / Lockout / EoP

[webapps] Roxy Fileman 1.4.5 – Arbitrary File Upload

[dos] Paradox Security Systems IPR512 – Denial Of Service

[webapps] ever gauzy v0.281.9 – JWT weak HMAC secret

[webapps] BrainyCP V1.0 – Remote Code Execution

[webapps] Online Computer and Laptop Store 1.0 – Remote Code Execution (RCE)

[local] Microsoft Edge (Chromium-based) Webview2 1.0.1661.34 – Spoofing

[webapps] Medicine Tracker System v1.0 – Sql Injection