>> TAG: #remote exploit

SAS Environment Manager 2.5 – ‘name’ Stored Cross-Site Scripting (XSS)

Atlassian Jira Server/Data Center 8.16.0 – Reflected Cross-Site Scripting (XSS)

WordPress Plugin YOP Polls 6.2.7 – Stored Cross Site Scripting (XSS)

Lightweight facebook-styled blog 1.3 – Remote Code Execution (RCE) (Authenticated) (Metasploit)

Simple Client Management System 1.0 – ‘uemail’ SQL Injection (Unauthenticated)

Seeddms 5.1.10 – Remote Command Execution (RCE) (Authenticated)

SAPSprint 7.60 – ‘SAPSprint’ Unquoted Service Path

Huawei dg8045 – Authentication Bypass

TP-Link TL-WR841N – Command Injection

Adobe ColdFusion 8 – Remote Command Execution (RCE)