Tag: remote exploit

[webapps] Multilaser Router RE018 AC1200 – Cross-Site Request Forgery (Enable Remote Access)

[webapps] WordPress Plugin RSS for Yandex Turbo 1.29 – Stored Cross-Site Scripting (XSS)

[webapps] BlackCat CMS 1.3.6 – 'Multiple' Stored Cross-Site Scripting (XSS)

[webapps] Discourse 2.7.0 – Rate Limit Bypass leads to 2FA Bypass

[remote] Tenda D151 & D301 – Configuration Download (Unauthenticated)

[webapps] GetSimple CMS My SMTP Contact Plugin 1.1.1 – CSRF to RCE

[webapps] Horde Groupware Webmail 5.2.22 – Stored XSS

[webapps] Tileserver-gl 3.0.0 – 'key' Reflected Cross-Site Scripting (XSS)

[webapps] Digital Crime Report Management System 1.0 – SQL Injection (Authentication Bypass)

[webapps] CITSmart ITSM 9.1.2.22 – LDAP Injection