>> TAG: #remote exploit

Kentico CMS 9.0-12.0.49 – Persistent Cross Site Scripting

DynPG 4.9.1 – Persistent Cross-Site Scripting (Authenticated)

openMAINT 1.1-2.4.2 – Arbitrary File Upload

SEO Panel 4.6.0 – Remote Code Execution

D-Link DSR-250N 3.12 – Denial of Service (PoC)

Textpattern CMS 4.6.2 – ‘body’ Persistent Cross-Site Scripting

BACnet Test Server 1.01 – Remote Denial of Service (PoC)

Karel IP Phone IP1211 Web Management Panel – Directory Traversal

EasyPMS 1.0.0 – Authentication Bypass

MOVEit Transfer 11.1.1 – ‘token’ Unauthenticated SQL Injection