Category: Security

[webapps] Scriptcase 9.7 – Remote Code Execution (RCE)

[webapps] SAM SUNNY TRIPOWER 5.0 – Insecure Direct Object Reference (IDOR)

[local] MiniTool Partition Wizard – Unquoted Service Path

[remote] Franklin Fueling Systems Colibri Controller Module 1.8.19.8580 – Local File Inclusion (LFI)

[webapps] Telesquare TLR-2855KS6 – Arbitrary File Creation

[webapps] Telesquare TLR-2855KS6 – Arbitrary File Deletion

[webapps] minewebcms 1.15.2 – Cross-site Scripting (XSS)

[local] Sherpa Connector Service v2020.2.20328.2050 – Unquoted Service Path

[webapps] qdPM 9.2 – Cross-site Request Forgery (CSRF)

[webapps] ICEHRM 31.0.0.0S – Cross-site Request Forgery (CSRF) to Account Deletion