Category: Security

[webapps] Open Web Analytics 1.7.3 – Remote Code Execution (RCE)

[webapps] CVAT 2.0 – SSRF (Server Side Request Forgery)

[remote] MSNSwitch Firmware MNT.2408 – Remote Code Exectuion (RCE)

[remote] AVEVA InTouch Access Anywhere Secure Gateway 2020 R2 – Path Traversal

[local] IOTransfer V4 – Unquoted Service Path

[remote] SmartRG Router SR510n 2.6.13 – RCE (Remote Code Execution)

[webapps] WordPress Plugin ImageMagick-Engine 1.7.4 – Remote Code Execution (RCE) (Authenticated)

[webapps] WordPress Plugin Zephyr Project Manager 3.2.42 – Multiple SQLi

[webapps] Feehi CMS 2.1.1 – Remote Code Execution (RCE) (Authenticated)

[webapps] TP-Link Tapo c200 1.1.15 – Remote Code Execution (RCE)