This Metasploit module exploits an authenticated arbitrary command execution vulnerability within the ‘server’ GET parameter of the /uapi-cgi/testaction.cgi page of Geutebruck G-Cam EEC-2xxx and G-Code EBC-21xx, EFD-22xx, ETHC-22xx, and EWPC-22xx…
Savsoft Quiz 5 – Stored Cross-Site Scripting
Pharmacy Medical Store and Sale Point 1.0 – ‘catid’ SQL Injection
https://nsw2.go.th notified by SW1337
QiHang Media Web Digital Signage 3.0.9 – Remote Code Execution (Unauthenticated)
QiHang Media Web Digital Signage 3.0.9 – Unauthenticated Arbitrary File Deletion
QiHang Media Web Digital Signage 3.0.9 – Cleartext Credential Disclosure
Microsoft SharePoint Server 2019 – Remote Code Execution
QiHang Media Web Digital Signage 3.0.9 – Unauthenticated Arbitrary File Disclosure
Bludit 3.9.2 – Authentication Bruteforce Mitigation Bypass