>> CATEGORY: Security

ICT Protege GX/WX 2.08 – Client-Side SHA1 Password Hash Disclosure

WordPress Plugin iQ Block Country 1.2.13 – Arbitrary File Deletion via Zip Slip (Authenticated)

Moodle 3.11.5 – SQLi (Authenticated)

Pluck CMS 4.7.16 – Remote Code Execution (RCE) (Authenticated)

Hikvision IP Camera – Backdoor

Tiny File Manager 2.4.6 – Remote Code Execution (RCE)

Apache APISIX 2.12.1 – Remote Code Execution (RCE)

Baixar GLPI Project 9.4.6 – SQLi

VIVE Runtime Service – ‘ViveAgentService’ Unquoted Service Path

Seowon SLR-120 Router – Remote Code Execution (Unauthenticated)