[webapps] ThingsBoard 3.3.1 'name' - Stored Cross-Site Scripting (XSS)

ThingsBoard 3.3.1 'name' - Stored Cross-Site Scripting (XSS)

[webapps] Feehi CMS 2.1.1 - Stored Cross-Site Scripting (XSS)

Feehi CMS 2.1.1 - Stored Cross-Site Scripting (XSS)

[webapps] Prestashop blockwishlist module 2.1.0 - SQLi

Prestashop blockwishlist module 2.1.0 - SQLi

[webapps] ThingsBoard 3.3.1 'description' - Stored Cross-Site Scripting (XSS)

ThingsBoard 3.3.1 'description' - Stored Cross-Site Scripting (XSS)

[remote] PAN-OS 10.0 - Remote Code Execution (RCE) (Authenticated)

PAN-OS 10.0 - Remote Code Execution (RCE) (Authenticated)

[remote] uftpd 2.10 - Directory Traversal (Authenticated)

uftpd 2.10 - Directory Traversal (Authenticated)

[webapps] NanoCMS v0.4 - Remote Code Execution (RCE) (Authenticated)

NanoCMS v0.4 - Remote Code Execution (RCE) (Authenticated)

[webapps] WordPress Plugin Duplicator 1.4.7 - Information Disclosure

WordPress Plugin Duplicator 1.4.7 - Information Disclosure

[webapps] WordPress Plugin Duplicator 1.4.6 - Unauthenticated Backup Download

WordPress Plugin Duplicator 1.4.6 - Unauthenticated Backup Download

[webapps] Webmin 1.996 - Remote Code Execution (RCE) (Authenticated)

Webmin 1.996 - Remote Code Execution (RCE) (Authenticated)

[remote] Omnia MPX 1.5.0+r1 - Path Traversal

Omnia MPX 1.5.0+r1 - Path Traversal

[webapps] Wavlink WN530HG4 - Password Disclosure

Wavlink WN530HG4 - Password Disclosure

[remote] Easy Chat Server 3.1 - Remote Stack Buffer Overflow (SEH)

Easy Chat Server 3.1 - Remote Stack Buffer Overflow (SEH)

[webapps] Wavlink WN533A8 - Password Disclosure

Wavlink WN533A8 - Password Disclosure

[webapps] mPDF 7.0 - Local File Inclusion

mPDF 7.0 - Local File Inclusion

[webapps] Wavlink WN533A8 - Cross-Site Scripting (XSS)

Wavlink WN533A8 - Cross-Site Scripting (XSS)

[webapps] CuteEditor for PHP 6.6 - Directory Traversal

CuteEditor for PHP 6.6 - Directory Traversal

[remote] rpc.py 0.6.0 - Remote Code Execution (RCE)

rpc.py 0.6.0 - Remote Code Execution (RCE)

[webapps] WordPress Plugin WP-UserOnline 2.87.6 - Stored Cross-Site Scripting (XSS)

WordPress Plugin WP-UserOnline 2.87.6 - Stored Cross-Site Scripting (XSS)

[webapps] Geonetwork 4.2.0 - XML External Entity (XXE)

Geonetwork 4.2.0 - XML External Entity (XXE)

[remote] Schneider Electric SpaceLogic C-Bus Home Controller (5200WHC2) - Remote Code Execution

Schneider Electric SpaceLogic C-Bus Home Controller (5200WHC2) - Remote Code Execution

[webapps] Carel pCOWeb HVAC BACnet Gateway 2.1.0 - Directory Traversal

Carel pCOWeb HVAC BACnet Gateway 2.1.0 - Directory Traversal

[local] Asus GameSDK v1.0.0.4 - 'GameSDK.exe' Unquoted Service Path

Asus GameSDK v1.0.0.4 - 'GameSDK.exe' Unquoted Service Path

[webapps] Dingtian-DT-R002 3.1.276A - Authentication Bypass

Dingtian-DT-R002 3.1.276A - Authentication Bypass

[webapps] WordPress Plugin Visual Slide Box Builder 3.2.9 - SQLi

WordPress Plugin Visual Slide Box Builder 3.2.9 - SQLi

[webapps] OctoBot WebInterface 0.4.3 - Remote Code Execution (RCE)

OctoBot WebInterface 0.4.3 - Remote Code Execution (RCE)

[webapps] CodoForum v5.1 - Remote Code Execution (RCE)

CodoForum v5.1 - Remote Code Execution (RCE)

[remote] IOTransfer 4.0 - Remote Code Execution (RCE)

IOTransfer 4.0 - Remote Code Execution (RCE)

[webapps] Magnolia CMS 6.2.19 - Stored Cross-Site Scripting (XSS)

Magnolia CMS 6.2.19 - Stored Cross-Site Scripting (XSS)

[local] Dr. Fone 4.0.8 - 'net_updater32.exe' Unquoted Service Path

Dr. Fone 4.0.8 - 'net_updater32.exe' Unquoted Service Path

[local] Kite 1.2021.610.0 - Unquoted Service Path

Kite 1.2021.610.0 - Unquoted Service Path