[webapps] COMMAX CVD-Axx DVR 5.1.4 – Weak Default Credentials Stream Disclosure
Posted by deepcore under Security (No Respond)
[webapps] 4images 1.8 – 'limitnumber' SQL Injection (Authenticated)
Posted by deepcore under Security (No Respond)
[webapps] easy-mock 1.6.0 – Remote Code Execution (RCE) (Authenticated)
Posted by deepcore under Security (No Respond)
[webapps] Simple Image Gallery System 1.0 – 'id' SQL Injection
Posted by deepcore under Security (No Respond)
[webapps] COVID19 Testing Management System 1.0 – 'searchdata' SQL Injection
Posted by deepcore under Security (No Respond)
[webapps] Altova MobileTogether Server 7.3 – XML External Entity Injection (XXE)
Posted by deepcore under Security (No Respond)
[webapps] RATES SYSTEM 1.0 – 'Multiple' SQL Injections
Posted by deepcore under Security (No Respond)
[webapps] IPCop 2.1.9 – Remote Code Execution (RCE) (Authenticated)
Posted by deepcore under Security (No Respond)
[local] Amica Prodigy 1.7 – Privilege Escalation
Posted by deepcore under Security (No Respond)
[webapps] Cockpit CMS 0.11.1 – 'Username Enumeration & Password Reset' NoSQL Injection
Posted by deepcore under Security (No Respond)
Cockpit CMS 0.11.1 – ‘Username Enumeration & Password Reset’ NoSQL Injection
Tags: 0day, remote exploit