Tag: 0day

[webapps] WordPress Plugin Comments Import & Export < 2.0.4 – CSV Injection

[webapps] Intex Router N-150 – Cross-Site Request Forgery (Add Admin)

[webapps] Intex Router N-150 – Arbitrary File Upload

[papers] Security of Modern Bluetooth Keyboards

[webapps] Ecessa ShieldLink SL175EHQ < 10.7.4 – Cross-Site Request Forgery (Add Superuser)

[dos] DIGISOL DG-BR4000NG – Buffer Overflow (PoC)

[webapps] AsusWRT RT-AC750GF – Cross-Site Request Forgery (Change Admin Password)

[webapps] Ecessa Edge EV150 10.7.4 – Cross-Site Request Forgery (Add Superuser)

[webapps] Ecessa WANWorx WVR-30 < 10.7.4 – Cross-Site Request Forgery (Add Superuser)

[webapps] WordPress Plugin iThemes Security < 7.0.3 – SQL Injection