[webapps] ECOA Building Automation System – Local File Disclosure
Posted by deepcore under Security (No Respond)
[webapps] ECOA Building Automation System – Arbitrary File Deletion
Posted by deepcore under Security (No Respond)
[webapps] WordPress Plugin Download From Files 1.48 – Arbitrary File Upload
Posted by deepcore under Security (No Respond)
[webapps] ECOA Building Automation System – Path Traversal Arbitrary File Upload
Posted by deepcore under Security (No Respond)
[webapps] ECOA Building Automation System – Weak Default Credentials
Posted by deepcore under Security (No Respond)
[local] Facebook ParlAI 1.0.0 – Deserialization of Untrusted Data in parlai
Posted by deepcore under Security (No Respond)
[webapps] Apartment Visitor Management System (AVMS) 1.0 – SQLi to RCE
Posted by deepcore under Security (No Respond)
[local] Active WebCam 11.5 – Unquoted Service Path
Posted by deepcore under Security (No Respond)
[webapps] Men Salon Management System 1.0 – Multiple Vulnerabilities
Posted by deepcore under Security (No Respond)
[webapps] Bus Pass Management System 1.0 – 'adminname' Stored Cross-Site Scripting (XSS)
Posted by deepcore under Security (No Respond)
Bus Pass Management System 1.0 – ‘adminname’ Stored Cross-Site Scripting (XSS)
Tags: 0day, remote exploit