Tag: remote exploit

[webapps] TripSpark VEO Transportation – Blind SQL Injection

[webapps] Customer Relationship Management System (CRM) 1.0 – Sql Injection Authentication Bypass

[webapps] PHP 7.3.15-3 – 'PHP_SESSION_UPLOAD_PROGRESS' Session Data Injection

[webapps] Elasticsearch ECE 7.13.3 – Anonymous Database Dump

[dos] Leawo Prof. Media 11.0.0.1 – Denial of Service (DoS) (PoC)

[webapps] NoteBurner 2.35 – Denial Of Service (DoS) (PoC)

[webapps] XOS Shop 1.0.9 – 'Multiple' Arbitrary File Deletion (Authenticated)

[webapps] WordPress Plugin Simple Post 1.1 – 'Text field' Stored Cross-Site Scripting (XSS)

[webapps] ElasticSearch 7.13.3 – Memory disclosure

[remote] KevinLAB BEMS 1.0 – Undocumented Backdoor Account