Category: Security

[remote] ICT Protege GX/WX 2.08 – Client-Side SHA1 Password Hash Disclosure

[webapps] WordPress Plugin iQ Block Country 1.2.13 – Arbitrary File Deletion via Zip Slip (Authenticated)

[webapps] Moodle 3.11.5 – SQLi (Authenticated)

[webapps] Pluck CMS 4.7.16 – Remote Code Execution (RCE) (Authenticated)

[remote] Hikvision IP Camera – Backdoor

[webapps] Tiny File Manager 2.4.6 – Remote Code Execution (RCE)

[remote] Apache APISIX 2.12.1 – Remote Code Execution (RCE)

[webapps] Baixar GLPI Project 9.4.6 – SQLi

[local] VIVE Runtime Service – 'ViveAgentService' Unquoted Service Path

[remote] Seowon SLR-120 Router – Remote Code Execution (Unauthenticated)