Category: Security

[remote] IBM Aspera Faspex 4.4.1 – YAML deserialization (RCE)

[webapps] ChurchCRM 4.5.1 – Authenticated SQL Injection

[webapps] NotrinosERP 0.7 – Authenticated Blind SQL Injection

[remote] Schneider Electric v1.0 – Directory traversal & Broken Authentication

[remote] Franklin Fueling Systems TS-550 – Exploit and Default Password

[webapps] Rukovoditel 3.3.1 – Remote Code Execution (RCE)

[webapps] Snitz Forum v1.0 – Blind SQL Injection

[remote] Docker based datastores for IBM Instana 241-2 243-0 – No Authentication

[local] Wondershare Dr Fone 12.9.6 – Privilege Escalation

[remote] Osprey Pump Controller 1.0.1 – Cross-Site Request Forgery