[webapps] Contao 4.13.2 - Cross-Site Scripting (XSS)

Contao 4.13.2 - Cross-Site Scripting (XSS)

[remote] SolarView Compact 6.00 - Directory Traversal

SolarView Compact 6.00 - Directory Traversal

[remote] Zyxel USG FLEX 5.21 - OS Command Injection

Zyxel USG FLEX 5.21 - OS Command Injection

[webapps] Microweber CMS 1.2.15 - Account Takeover

Microweber CMS 1.2.15 - Account Takeover

[remote] Telesquare SDT-CW3B1 1.1.0 - OS Command Injection

Telesquare SDT-CW3B1 1.1.0 - OS Command Injection

[remote] Schneider Electric C-Bus Automation Controller (5500SHAC) 1.10 - Remote Code Execution (RCE)

Schneider Electric C-Bus Automation Controller (5500SHAC) 1.10 - Remote Code Execution (RCE)

[webapps] Confluence Data Center 7.18.0 - Remote Code Execution (RCE)

Confluence Data Center 7.18.0 - Remote Code Execution (RCE)

[webapps] WordPress Plugin Motopress Hotel Booking Lite 4.2.4 - Stored Cross-Site Scripting (XSS)

WordPress Plugin Motopress Hotel Booking Lite 4.2.4 - Stored Cross-Site Scripting (XSS)

[local] Real Player v.20.0.8.310 G2 Control - 'DoGoToURL()' Remote Code Execution (RCE)

Real Player v.20.0.8.310 G2 Control - 'DoGoToURL()' Remote Code Execution (RCE)

[remote] Algo 8028 Control Panel - Remote Code Execution (RCE) (Authenticated)

Algo 8028 Control Panel - Remote Code Execution (RCE) (Authenticated)

[remote] Marval MSM v14.19.0.12476 - Cross-Site Request Forgery (CSRF)

Marval MSM v14.19.0.12476 - Cross-Site Request Forgery (CSRF)

[remote] Sourcegraph Gitserver 3.36.3 - Remote Code Execution (RCE)

Sourcegraph Gitserver 3.36.3 - Remote Code Execution (RCE)

[webapps] ChurchCRM 4.4.5 - SQLi

ChurchCRM 4.4.5 - SQLi

[webapps] phpIPAM 1.4.5 - Remote Code Execution (RCE) (Authenticated)

phpIPAM 1.4.5 - Remote Code Execution (RCE) (Authenticated)

[remote] Marval MSM v14.19.0.12476 - Remote Code Execution (RCE) (Authenticated)

Marval MSM v14.19.0.12476 - Remote Code Execution (RCE) (Authenticated)

[local] HP LaserJet Professional M1210 MFP Series Receive Fax Service - Unquoted Service Path

HP LaserJet Professional M1210 MFP Series Receive Fax Service - Unquoted Service Path

[webapps] Old Age Home Management System 1.0 - SQLi Authentication Bypass

Old Age Home Management System 1.0 - SQLi Authentication Bypass

[remote] TP-Link Router AX50 firmware 210730 - Remote Code Execution (RCE) (Authenticated)

TP-Link Router AX50 firmware 210730 - Remote Code Execution (RCE) (Authenticated)

[webapps] SolarView Compact 6.00 - 'pow' Cross-Site Scripting (XSS)

SolarView Compact 6.00 - 'pow' Cross-Site Scripting (XSS)

[local] Real Player 16.0.3.51 - 'external::Import()' Directory Traversal to Remote Code Execution (RCE)

Real Player 16.0.3.51 - 'external::Import()' Directory Traversal to Remote Code Execution (RCE)

[webapps] Avantune Genialcloud ProJ 10 - Cross-Site Scripting (XSS)

Avantune Genialcloud ProJ 10 - Cross-Site Scripting (XSS)

[remote] Virtua Software Cobranca 12S - SQLi

Virtua Software Cobranca 12S - SQLi

[webapps] SolarView Compact 6.00 - 'time_begin' Cross-Site Scripting (XSS)

SolarView Compact 6.00 - 'time_begin' Cross-Site Scripting (XSS)

[webapps] Pandora FMS v7.0NG.742 - Remote Code Execution (RCE) (Authenticated)

Pandora FMS v7.0NG.742 - Remote Code Execution (RCE) (Authenticated)

[webapps] WordPress Plugin Weblizar 8.9 - Backdoor

WordPress Plugin Weblizar 8.9 - Backdoor

[webapps] WSO2 Management Console (Multiple Products) - Unauthenticated Reflected Cross-Site Scripting (XSS)

WSO2 Management Console (Multiple Products) - Unauthenticated Reflected Cross-Site Scripting (XSS)

[webapps] Mailhog 1.0.1 - Stored Cross-Site Scripting (XSS)

Mailhog 1.0.1 - Stored Cross-Site Scripting (XSS)

[remote] WiFi Mouse 1.7.8.5 - Remote Code Execution(v2)

WiFi Mouse 1.7.8.5 - Remote Code Execution(v2)

[remote] Nginx 1.20.0 - Denial of Service (DOS)

Nginx 1.20.0 - Denial of Service (DOS)

[local] Kite 1.2021.610.0 - Unquoted Service Path

Kite 1.2021.610.0 - Unquoted Service Path

[local] Dr. Fone 4.0.8 - 'net_updater32.exe' Unquoted Service Path

Dr. Fone 4.0.8 - 'net_updater32.exe' Unquoted Service Path

[webapps] Magnolia CMS 6.2.19 - Stored Cross-Site Scripting (XSS)

Magnolia CMS 6.2.19 - Stored Cross-Site Scripting (XSS)

[remote] IOTransfer 4.0 - Remote Code Execution (RCE)

IOTransfer 4.0 - Remote Code Execution (RCE)

[webapps] CodoForum v5.1 - Remote Code Execution (RCE)

CodoForum v5.1 - Remote Code Execution (RCE)

[webapps] OctoBot WebInterface 0.4.3 - Remote Code Execution (RCE)

OctoBot WebInterface 0.4.3 - Remote Code Execution (RCE)

[webapps] WordPress Plugin Visual Slide Box Builder 3.2.9 - SQLi

WordPress Plugin Visual Slide Box Builder 3.2.9 - SQLi

[webapps] Dingtian-DT-R002 3.1.276A - Authentication Bypass

Dingtian-DT-R002 3.1.276A - Authentication Bypass

[local] Asus GameSDK v1.0.0.4 - 'GameSDK.exe' Unquoted Service Path

Asus GameSDK v1.0.0.4 - 'GameSDK.exe' Unquoted Service Path

[webapps] Carel pCOWeb HVAC BACnet Gateway 2.1.0 - Directory Traversal

Carel pCOWeb HVAC BACnet Gateway 2.1.0 - Directory Traversal

[remote] Schneider Electric SpaceLogic C-Bus Home Controller (5200WHC2) - Remote Code Execution

Schneider Electric SpaceLogic C-Bus Home Controller (5200WHC2) - Remote Code Execution

[webapps] Geonetwork 4.2.0 - XML External Entity (XXE)

Geonetwork 4.2.0 - XML External Entity (XXE)

[webapps] WordPress Plugin WP-UserOnline 2.87.6 - Stored Cross-Site Scripting (XSS)

WordPress Plugin WP-UserOnline 2.87.6 - Stored Cross-Site Scripting (XSS)

[remote] rpc.py 0.6.0 - Remote Code Execution (RCE)

rpc.py 0.6.0 - Remote Code Execution (RCE)

[webapps] CuteEditor for PHP 6.6 - Directory Traversal

CuteEditor for PHP 6.6 - Directory Traversal

[webapps] Wavlink WN533A8 - Cross-Site Scripting (XSS)

Wavlink WN533A8 - Cross-Site Scripting (XSS)

[webapps] mPDF 7.0 - Local File Inclusion

mPDF 7.0 - Local File Inclusion

[webapps] Wavlink WN533A8 - Password Disclosure

Wavlink WN533A8 - Password Disclosure

[remote] Easy Chat Server 3.1 - Remote Stack Buffer Overflow (SEH)

Easy Chat Server 3.1 - Remote Stack Buffer Overflow (SEH)

[webapps] Wavlink WN530HG4 - Password Disclosure

Wavlink WN530HG4 - Password Disclosure

[remote] Omnia MPX 1.5.0+r1 - Path Traversal

Omnia MPX 1.5.0+r1 - Path Traversal

[webapps] Webmin 1.996 - Remote Code Execution (RCE) (Authenticated)

Webmin 1.996 - Remote Code Execution (RCE) (Authenticated)

[webapps] WordPress Plugin Duplicator 1.4.6 - Unauthenticated Backup Download

WordPress Plugin Duplicator 1.4.6 - Unauthenticated Backup Download

[webapps] WordPress Plugin Duplicator 1.4.7 - Information Disclosure

WordPress Plugin Duplicator 1.4.7 - Information Disclosure

[webapps] NanoCMS v0.4 - Remote Code Execution (RCE) (Authenticated)

NanoCMS v0.4 - Remote Code Execution (RCE) (Authenticated)

[remote] uftpd 2.10 - Directory Traversal (Authenticated)

uftpd 2.10 - Directory Traversal (Authenticated)

[remote] PAN-OS 10.0 - Remote Code Execution (RCE) (Authenticated)

PAN-OS 10.0 - Remote Code Execution (RCE) (Authenticated)

[webapps] ThingsBoard 3.3.1 'description' - Stored Cross-Site Scripting (XSS)

ThingsBoard 3.3.1 'description' - Stored Cross-Site Scripting (XSS)

[webapps] Prestashop blockwishlist module 2.1.0 - SQLi

Prestashop blockwishlist module 2.1.0 - SQLi

[webapps] Feehi CMS 2.1.1 - Stored Cross-Site Scripting (XSS)

Feehi CMS 2.1.1 - Stored Cross-Site Scripting (XSS)

[webapps] ThingsBoard 3.3.1 'name' - Stored Cross-Site Scripting (XSS)

ThingsBoard 3.3.1 'name' - Stored Cross-Site Scripting (XSS)