>> TAG: #remote exploit

eDirectory – SQL Injection

qdPM 9.1 – ‘search[keywords]’ Cross-Site Scripting

MISP 2.4.97 – SQL Command Execution via Command Injection in STIX Module

Master IP CAM 01 3.3.4.2103 – Remote Command Execution

NBMonitor 1.6.5.0 – ‘Key’ Denial of Service (PoC)

CMSsite 1.0 – ‘post’ SQL Injection

Webiness Inventory 2.3 – ‘ProductModel’ Arbitrary File Upload

M/Monit 3.7.2 – Privilege Escalation

ArangoDB Community Edition 3.4.2-1 – Cross-Site Scripting

Apache CouchDB 2.3.0 – Cross-Site Scripting