Tag: 0day

[webapps] HiSilicon Video Encoders – RCE via unauthenticated command injection

[webapps] HiSilicon Video Encoders – Unauthenticated file disclosure via path traversal

[webapps] HiSilicon Video Encoders – Full admin access via backdoor password

[webapps] HiSilicon video encoders – RCE via unauthenticated upload of malicious firmware

[webapps] HiSilicon Video Encoders – Unauthenticated RTSP buffer overflow (DoS)

[webapps] Jenkins 2.63 – Sandbox bypass in pipeline: Groovy plug-in

[webapps] Hostel Management System 2.1 – Cross Site Scripting (Multiple Fields)

[webapps] Employee Management System 1.0 – Authentication Bypass

[webapps] Alumni Management System 1.0 – Authentication Bypass

[webapps] Employee Management System 1.0 – Cross Site Scripting (Stored)