>> TAG: #remote exploit

Online Voting System 1.0 – SQLi (Authentication Bypass) + Remote Code Execution (RCE)

Ricon Industrial Cellular Router S9922XL – Remote Command Execution (RCE)

TextPattern CMS 4.9.0-dev – Remote Command Execution (RCE) (Authenticated)

WordPress Plugin WP Learn Manager 1.1.2 – Stored Cross-Site Scripting (XSS)

OpenEMR 5.0.1.7 – ‘fileName’ Path Traversal (Authenticated) (2)

WinWaste.NET 1.0.6183.16475 – Privilege Escalation due Incorrect Access Control

b2evolution 7.2.2 – ‘edit account details’ Cross-Site Request Forgery (CSRF)

AKCP sensorProbe SPX476 – ‘Multiple’ Cross-Site Scripting (XSS)

WordPress Plugin Modern Events Calendar 5.16.2 – Remote Code Execution (Authenticated)

Scratch Desktop 3.17 – Cross-Site Scripting/Remote Code Execution (XSS/RCE)