Tag: 0day

[dos] BACnet Test Server 1.01 – Remote Denial of Service (PoC)

[webapps] Karel IP Phone IP1211 Web Management Panel – Directory Traversal

[webapps] EasyPMS 1.0.0 – Authentication Bypass

[webapps] MOVEit Transfer 11.1.1 – 'token' Unauthenticated SQL Injection

[webapps] SpamTitan 7.07 – Unauthenticated Remote Code Execution

[webapps] MedDream PACS Server 6.8.3.751 – Remote Code Execution (Authenticated)

[webapps] Photo Share Website 1.0 – Persistent Cross-Site Scripting

[webapps] BrightSign Digital Signage Diagnostic Web Server 8.2.26 – Server-Side Request Forgery (Unauthenticated)

[webapps] CMS Made Simple 2.2.14 – Persistent Cross-Site Scripting (Authenticated)

[remote] Sony IPELA Network Camera 1.82.01 – 'ftpclient.cgi' Remote Stack Buffer Overflow