Tag: remote exploit

[webapps] WordPress Plugin TablePress 1.14 – CSV Injection

[webapps] WordPress Plugin WP Sitemap Page 1.6.4 – Stored Cross-Site Scripting (XSS)

[local] Argus Surveillance DVR 4.0 – Unquoted Service Path

[webapps] OpenEMR 6.0.0 – 'noteid' Insecure Direct Object Reference (IDOR)

[webapps] FlatCore CMS 2.0.7 – Remote Code Execution (RCE) (Authenticated)

[webapps] Bus Pass Management System 1.0 – 'viewid' Insecure direct object references (IDOR)

[webapps] Patient Appointment Scheduler System 1.0 – Unauthenticated File Upload & Remote Code Execution (RCE)

[webapps] Patient Appointment Scheduler System 1.0 – Persistent/Stored XSS

[dos] SmartFTP Client 10.0.2909.0 – 'Multiple' Denial of Service

[webapps] Antminer Monitor 0.5.0 – Authentication Bypass