Tag: remote exploit

[webapps] LiveZilla Server 8.0.1.0 – 'Accept-Language' Reflected XSS

[remote] KZTech/JatonTec/Neotel JT3500V 4G LTE CPE 2.0.1 – Hard coded Credentials Shell Access

[webapps] KZTech/JatonTec/Neotel JT3500V 4G LTE CPE 2.0.1 – Authentication Bypass

[webapps] Plone CMS 5.2.3 – 'Title' Stored XSS

[local] VFS for Git 1.0.21014.1 – 'GVFS.Service' Unquoted Service Path

[webapps] VestaCP 0.9.8 – 'v_interface' Add IP Stored XSS

[webapps] rConfig 3.9.6 – Arbitrary File Upload to Remote Code Execution (Authenticated)

[webapps] SEO Panel 4.8.0 – 'order_col' Blind SQL Injection

[webapps] Hestia Control Panel 1.3.2 – Arbitrary File Write

[webapps] WoWonder Social Network Platform 3.1 – 'event_id' SQL Injection