>> TAG: #remote exploit

Openlitespeed 1.7.9 – ‘Notes’ Stored Cross-Site Scripting

GetSimple CMS 3.3.16 – Reflected XSS to RCE

Novel Boutique House-plus 3.5.1 – Arbitrary File Download

WordPress Plugin WP Super Cache 1.7.1 – Remote Code Execution (Authenticated)

TP-Link Devices – ‘setDefaultHostname’ Stored Cross-site Scripting (Unauthenticated)

vsftpd 3.0.3 – Remote Denial of Service

Concrete5 8.5.4 – ‘name’ Stored XSS

Equipment Inventory System 1.0 – ‘multiple’ Stored XSS

Budget Management System 1.0 – ‘Budget title’ Stored XSS

SyncBreeze 10.1.16 – XML Parsing Stack-based Buffer Overflow