Category: Security

[webapps] Joomla Plugin SexyPolling 2.1.7 – SQLi

[webapps] WordPress Plugin stafflist 3.1.2 – SQLi (Authenticated)

[webapps] Bitrix24 – Remote Code Execution (RCE) (Authenticated)

[webapps] Navigate CMS 2.9.4 – Server-Side Request Forgery (SSRF) (Authenticated)

[webapps] Magento eCommerce CE v2.3.5-p2 – Blind SQLi

[webapps] Explore CMS 1.0 – SQL Injection

[remote] Akka HTTP 10.1.14 – Denial of Service

[remote] DLINK DAP-1620 A1 v1.01 – Directory Traversal

[webapps] Cyclos 4.14.7 – 'groupId' DOM Based Cross-Site Scripting (XSS)

[remote] PyScript – Read Remote Python Source Code