>> TAG: #remote exploit

NBMonitor 1.6.8 – Denial of Service (PoC)

WordPress Plugin wpDiscuz 7.0.4 – Arbitrary File Upload (Unauthenticated)

Grav CMS 1.7.10 – Server-Side Template Injection (SSTI) (Authenticated)

Rocket.Chat 3.12.1 – NoSQL Injection to RCE (Unauthenticated)

IcoFX 2.6 – ‘.ico’ Buffer Overflow SEH + DEP Bypass using JOP

WordPress Plugin Smart Slider-3 3.5.0.8 – ‘name’ Stored Cross-Site Scripting (XSS)

OptiLink ONT1GEW GPON 2.1.11_X101 Build 1127.190306 – Remote Code Execution (Authenticated)

Sticky Notes & Color Widgets 1.4.2 – Denial of Service (PoC)

My Notes Safe 5.3 – Denial of Service (PoC)

Macaron Notes great notebook 5.5 – Denial of Service (PoC)