Loan Management System 1.0 – Multiple Cross Site Scripting (Stored)
Loan Management System 1.0 – Multiple Cross Site Scripting (Stored)
Comtrend AR-5387un router – Persistent XSS (Authenticated)
http://ocsb.go.th/u.htm notified by ./Fell Ganns
http://newweb.ocsb.go.th/u.htm notified by ./Fell Ganns
Hostel Management System 2.1 – Cross Site Scripting (Multiple Fields)
Jenkins 2.63 – Sandbox bypass in pipeline: Groovy plug-in
HiSilicon Video Encoders – Unauthenticated RTSP buffer overflow (DoS)
HiSilicon video encoders – RCE via unauthenticated upload of malicious firmware
HiSilicon Video Encoders – Full admin access via backdoor password
HiSilicon Video Encoders – Unauthenticated file disclosure via path traversal