Tag: remote exploit

[webapps] KevinLAB BEMS 1.0 – Unauthenticated SQL Injection / Authentication Bypass

[webapps] KevinLAB BEMS 1.0 – File Path Traversal Information Disclosure (Authenticated)

[webapps] CSZ CMS 1.2.9 – 'Multiple' Arbitrary File Deletion

[webapps] WordPress Plugin KN Fix Your Title 1.0.1 – 'Separator' Stored Cross-Site Scripting (XSS)

[webapps] WordPress Plugin LearnPress 3.2.6.8 – Privilege Escalation

[webapps] WordPress Plugin LearnPress 3.2.6.7 – 'current_items' SQL Injection (Authenticated)

[webapps] WordPress Plugin Mimetic Books 0.2.13 – 'Default Publisher ID field' Stored Cross-Site Scripting (XSS)

[webapps] Dolibarr ERP/CRM 10.0.6 – Login Brute Force

[webapps] PEEL Shopping 9.3.0 – 'id' Time-based SQL Injection

[webapps] Seagate BlackArmor NAS sg2000-2000.1331 – Command Injection