Category: Security

[remote] SAP BusinessObjects Intelligence 4.3 – XML External Entity (XXE)

[remote] DLINK DIR850 – Insecure Access Control

[remote] Ruijie Reyee Mesh Router – Remote Code Execution (RCE) (Authenticated)

[webapps] ImpressCMS v1.4.4 – Unrestricted File Upload

[webapps] Cyclos 4.14.7 – DOM Based Cross-Site Scripting (XSS)

[webapps] PHProjekt PhpSimplyGest v1.3. – Stored Cross-Site Scripting (XSS)

[remote] USR IOT 4G LTE Industrial Cellular VPN Router 1.0.36 – Remote Root Backdoor

[webapps] MyBB 1.8.29 – MyBB 1.8.29 – Remote Code Execution (RCE) (Authenticated)

[webapps] Beehive Forum – Account Takeover

[webapps] WordPress Plugin Blue Admin 21.06.01 – Cross-Site Request Forgery (CSRF)