webapps

日期	标题	类别	作者
2019-02-11	IPFire 2.21 – Cross-Site Scripting	webapps	Ozer Goker
2019-02-11	Coship Wireless Router 4.0.0.x/5.0.0.x – WiFi Password Reset	webapps	Adithyan AK
2019-02-11	Smoothwall Express 3.1-SP4 – Cross-Site Scripting	webapps	Ozer Goker
2019-02-06	osCommerce 2.3.4.1 – ‘reviews_id’ SQL Injection	webapps	Mehmet EMIROGLU
2019-02-06	osCommerce 2.3.4.1 – ‘products_id’ SQL Injection	webapps	Mehmet EMIROGLU
2019-02-06	osCommerce 2.3.4.1 – ‘currency’ SQL Injection	webapps	Mehmet EMIROGLU
2019-02-05	devolo dLAN 550 duo+ Starter Kit – Cross-Site Request Forgery	webapps	sm
2019-02-05	BEWARD N100 H.264 VGA IP Camera M2.1.6 – Arbitrary File Disclosure	webapps	LiquidWorm
2019-02-05	BEWARD N100 H.264 VGA IP Camera M2.1.6 – Remote Code Execution	webapps	LiquidWorm
2019-02-05	BEWARD N100 H.264 VGA IP Camera M2.1.6 – Cross-Site Request Forgery (Add Admin)	webapps	LiquidWorm
2019-02-05	BEWARD N100 H.264 VGA IP Camera M2.1.6 – RTSP Stream Disclosure	webapps	LiquidWorm
2019-02-05	OpenMRS Platform < 2.24.0 - Insecure Object Deserialization	webapps	Bishop Fox
2019-02-05	Zyxel VMG3312-B10B DSL-491HNU-B1B v2 Modem – Cross-Site Request Forgery	webapps	Yusuf Furkan
2019-02-05	devolo dLAN 550 duo+ Starter Kit – Remote Code Execution	webapps	sm
2019-02-04	pfSense 2.4.4-p1 – Cross-Site Scripting	webapps	Ozer Goker
2019-02-04	Nessus 8.2.1 – Cross-Site Scripting	webapps	Ozer Goker
2019-02-04	SuiteCRM 7.10.7 – ‘record’ SQL Injection	webapps	Mehmet EMIROGLU
2019-02-04	SuiteCRM 7.10.7 – ‘parentTab’ SQL Injection	webapps	Mehmet EMIROGLU
2019-02-04	ResourceSpace 8.6 – ‘watched_searches.php’ SQL Injection	webapps	dd_
2019-02-01	SureMDM < 2018-11 Patch - Local / Remote File Inclusion	webapps	Digital Interruption
2019-01-30	Rukovoditel Project Management CRM 2.4.1 – ‘lists_id’ SQL Injection	webapps	Mehmet EMIROGLU
2019-01-29	PDF Signer 3.0 – Server-Side Template Injection leading to Remote Command Execution (via Cross-Site Request Forgery Cookie)	webapps	dd_
2019-01-28	CMSsite 1.0 – ‘cat_id’ SQL Injection	webapps	Majid kalantari
2019-01-28	LogonBox Limited / Hypersocket Nervepoint Access Manager – (Unauthenticated) Insecure Direct Object Reference	webapps	0v3rride