>> TAG: #remote exploit

LiveZilla Server 8.0.1.0 – ‘Accept-Language’ Reflected XSS

KZTech/JatonTec/Neotel JT3500V 4G LTE CPE 2.0.1 – Hard coded Credentials Shell Access

KZTech/JatonTec/Neotel JT3500V 4G LTE CPE 2.0.1 – Authentication Bypass

Plone CMS 5.2.3 – ‘Title’ Stored XSS

VFS for Git 1.0.21014.1 – ‘GVFS.Service’ Unquoted Service Path

VestaCP 0.9.8 – ‘v_interface’ Add IP Stored XSS

rConfig 3.9.6 – Arbitrary File Upload to Remote Code Execution (Authenticated)

SEO Panel 4.8.0 – ‘order_col’ Blind SQL Injection

Hestia Control Panel 1.3.2 – Arbitrary File Write

WoWonder Social Network Platform 3.1 – ‘event_id’ SQL Injection