[webapps] Cyclos 4.14.7 – DOM Based Cross-Site Scripting (XSS)
Posted by deepcore under Security (No Respond)
[webapps] PHProjekt PhpSimplyGest v1.3. – Stored Cross-Site Scripting (XSS)
Posted by deepcore under Security (No Respond)
[remote] USR IOT 4G LTE Industrial Cellular VPN Router 1.0.36 – Remote Root Backdoor
Posted by deepcore under Security (No Respond)
USR IOT 4G LTE Industrial Cellular VPN Router 1.0.36 – Remote Root Backdoor
Tags: 0day, remote exploit[webapps] MyBB 1.8.29 – MyBB 1.8.29 – Remote Code Execution (RCE) (Authenticated)
Posted by deepcore under Security (No Respond)
[webapps] Beehive Forum – Account Takeover
Posted by deepcore under Security (No Respond)
[webapps] WordPress Plugin Blue Admin 21.06.01 – Cross-Site Request Forgery (CSRF)
Posted by deepcore under Security (No Respond)
[webapps] Joomla Plugin SexyPolling 2.1.7 – SQLi
Posted by deepcore under Security (No Respond)
[webapps] WordPress Plugin stafflist 3.1.2 – SQLi (Authenticated)
Posted by deepcore under Security (No Respond)
[webapps] Bitrix24 – Remote Code Execution (RCE) (Authenticated)
Posted by deepcore under Security (No Respond)
[webapps] Navigate CMS 2.9.4 – Server-Side Request Forgery (SSRF) (Authenticated)
Posted by deepcore under Security (No Respond)