Category: Security

[webapps] ManageEngine ADManager Plus 6.5.7 – Cross-Site Scripting

[webapps] WordPress Plugin Gift Voucher 1.0.5 – 'template_id' SQL Injection

[remote] Apache Struts 2.3 < 2.3.34 / 2.5 < 2.5.16 – Remote Code Execution

[webapps] UltimatePOS 2.5 – Remote Code Execution

[webapps] ManageEngine ADManager Plus 6.5.7 – HTML Injection

[dos] SkypeApp 12.8.487.0 – 'Cuenta de Skype o Microsoft' Denial of Service (PoC)

[webapps] Vox TG790 ADSL Router – Cross-Site Request Forgery (Add Admin)

[dos] CuteFTP 8.3.1 – Denial Of Service (PoC)

[webapps] Twitter-Clone 1 – 'code' SQL Injection

[webapps] PCViewer vt1000 – Directory Traversal