>> CATEGORY: Security

Online Quiz Maker 1.0 – ‘catid’ SQL Injection

FsPro Labs Event Log Explorer v4.6.1.2115 – XML External Entity Injection

Admidio 3.3.5 – Cross-Site Request Forgery (Change Permissions)

Microsoft Windows Explorer Out-of-Bound Read – Denial of Service (PoC)

Vox TG790 ADSL Router – Cross-Site Scripting

Acunetix WVS Reporter 10.0 – Denial of Service (PoC)

Argus Surveillance DVR 4.0.0.0 – Privilege Escalation

NetworkActiv Web Server 4.0 Pre-Alpha-3.7.2 – ‘Username’ Denial of Service (PoC)

Cybrotech CyBroHttpServer 1.0.3 – Directory Traversal

DLink DIR-601 – Credential Disclosure