>> TAG: #remote exploit

TripSpark VEO Transportation – Blind SQL Injection

Customer Relationship Management System (CRM) 1.0 – Sql Injection Authentication Bypass

PHP 7.3.15-3 – ‘PHP_SESSION_UPLOAD_PROGRESS’ Session Data Injection

Elasticsearch ECE 7.13.3 – Anonymous Database Dump

Leawo Prof. Media 11.0.0.1 – Denial of Service (DoS) (PoC)

NoteBurner 2.35 – Denial Of Service (DoS) (PoC)

XOS Shop 1.0.9 – ‘Multiple’ Arbitrary File Deletion (Authenticated)

WordPress Plugin Simple Post 1.1 – ‘Text field’ Stored Cross-Site Scripting (XSS)

ElasticSearch 7.13.3 – Memory disclosure

KevinLAB BEMS 1.0 – Undocumented Backdoor Account