>> TAG: #remote exploit

COMMAX CVD-Axx DVR 5.1.4 – Weak Default Credentials Stream Disclosure

4images 1.8 – ‘limitnumber’ SQL Injection (Authenticated)

easy-mock 1.6.0 – Remote Code Execution (RCE) (Authenticated)

Simple Image Gallery System 1.0 – ‘id’ SQL Injection

COVID19 Testing Management System 1.0 – ‘searchdata’ SQL Injection

Altova MobileTogether Server 7.3 – XML External Entity Injection (XXE)

RATES SYSTEM 1.0 – ‘Multiple’ SQL Injections

IPCop 2.1.9 – Remote Code Execution (RCE) (Authenticated)

Amica Prodigy 1.7 – Privilege Escalation

Cockpit CMS 0.11.1 – ‘Username Enumeration & Password Reset’ NoSQL Injection