[webapps] Showdoc 2.10.3 – Stored Cross-Site Scripting (XSS)
Posted by deepcore under Security (No Respond)
[remote] F5 BIG-IP 16.0.x – Remote Code Execution (RCE)
Posted by deepcore under Security (No Respond)
[webapps] Royal Event Management System 1.0 – 'todate' SQL Injection (Authenticated)
Posted by deepcore under Security (No Respond)
Royal Event Management System 1.0 – ‘todate’ SQL Injection (Authenticated)
Tags: 0day, remote exploit[webapps] College Management System 1.0 – 'course_code' SQL Injection (Authenticated)
Posted by deepcore under Security (No Respond)
College Management System 1.0 – ‘course_code’ SQL Injection (Authenticated)
Tags: 0day, remote exploit[webapps] TLR-2005KSH – Arbitrary File Delete
Posted by deepcore under Security (No Respond)
[local] TCQ – ITeCProteccioAppServer.exe – Unquoted Service Path
Posted by deepcore under Security (No Respond)
[remote] SAP BusinessObjects Intelligence 4.3 – XML External Entity (XXE)
Posted by deepcore under Security (No Respond)
[remote] DLINK DIR850 – Insecure Access Control
Posted by deepcore under Security (No Respond)
[remote] Ruijie Reyee Mesh Router – Remote Code Execution (RCE) (Authenticated)
Posted by deepcore under Security (No Respond)
[webapps] ImpressCMS v1.4.4 – Unrestricted File Upload
Posted by deepcore under Security (No Respond)