Tag: remote exploit

[webapps] COMMAX CVD-Axx DVR 5.1.4 – Weak Default Credentials Stream Disclosure

[webapps] 4images 1.8 – 'limitnumber' SQL Injection (Authenticated)

[webapps] easy-mock 1.6.0 – Remote Code Execution (RCE) (Authenticated)

[webapps] Simple Image Gallery System 1.0 – 'id' SQL Injection

[webapps] COVID19 Testing Management System 1.0 – 'searchdata' SQL Injection

[webapps] Altova MobileTogether Server 7.3 – XML External Entity Injection (XXE)

[webapps] RATES SYSTEM 1.0 – 'Multiple' SQL Injections

[webapps] IPCop 2.1.9 – Remote Code Execution (RCE) (Authenticated)

[local] Amica Prodigy 1.7 – Privilege Escalation

[webapps] Cockpit CMS 0.11.1 – 'Username Enumeration & Password Reset' NoSQL Injection