Category: Security

[webapps] TufinOS 2.17 Build 1193 – XML External Entity Injection

[webapps] Data Center Audit 2.6.2 – 'username' SQL Injection

[dos] HeidiSQL 9.5.0.5196 – Denial of Service (PoC)

[webapps] Facturation System 1.0 – 'modid' SQL Injection

[webapps] Easyndexer 1.0 – Cross-Site Request Forgery (Add Admin)

[dos] CuteFTP 9.3.0.3 – Denial of Service (PoC)

[webapps] GPS Tracking System 2.12 – 'username' SQL Injection

[webapps] ServerZilla 1.0 – 'email' SQL Injection

[webapps] D-LINK Central WifiManager CWM-100 – Server-Side Request Forgery

[dos] Mongoose Web Server 6.9 – Denial of Service (PoC)