http://nanuan.go.th/nanuan/module_eservice1/ notified by ./Niz4r
http://nanuan.go.th/nanuan/module_eservice1/ notified by ./Niz4r
Transposh WordPress Translation versions 1.0.8.1 and below have a “save_transposh” action available at “/wp-admin/admin.php?page=tp_advanced” that does not properly validate the “Log file name” allowing an attacker with the “Administrator” role…
Loan Management System version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass.
Loan Management System version 1.0 suffers from a persistent cross site scripting vulnerability.
WordPress Plugin WP-UserOnline 2.87.6 – Stored Cross-Site Scripting (XSS)
Schneider Electric SpaceLogic C-Bus Home Controller (5200WHC2) – Remote Code Execution
Geonetwork 4.2.0 – XML External Entity (XXE)
Carel pCOWeb HVAC BACnet Gateway 2.1.0 – Directory Traversal
Asus GameSDK v1.0.0.4 – ‘GameSDK.exe’ Unquoted Service Path
Dingtian-DT-R002 3.1.276A – Authentication Bypass