LifeRay 7.2.1 GA2 Cross Site Scripting
Authored by 3ndG4me
LifeRay version 7.2.1 GA2 suffers from a persistent cross site scripting vulnerability.
advisories | CVE-2020-7934
Change Mirror Download
# Exploit Title: LifeRay 7.2.1 GA2 - Stored XSS# Date: 10/05/2020 #...
Apache OpenMeetings 5.0.0 Denial Of Service
Authored by SunCSR
Apache OpenMeetings version 5.0.0 suffers from a denial of service vulnerability.
advisories | CVE-2020-13951
Change Mirror Download
Exploit Title: Apache OpenMeetings 5.0.0 - 'hostname' Denial of Service# Google Dork:...
nopCommerce Store 4.30 Cross Site Scripting
Authored by Hemant Patidar
nopCommerce Store version 4.30 suffers from a persistent cross site scripting vulnerability.
Change Mirror Download
# Exploit Title: nopCommerce Store 4.30 - 'name' Stored Cross-Site Scripting# Date: 24-11-2020#...
Vtiger CRM 7.0 Cross Site Scripting
Authored by Benjamin Kunz Mejri | Site vulnerability-lab.com
Vtiger CRM version 7.0 suffers from a persistent cross site scripting vulnerability.
Change Mirror Download
Document Title:===============VTiger v7.0 CRM - (To) Persistent Email VulnerabilityReferences...
Barco wePresent Hardcoded API Credentials
Authored by Jim Becher | Site korelogic.com
Barco wePresent device firmware includes a hardcoded API account and password that is discoverable by inspecting the firmware image. A malicious actor could...
Barco wePresent Admin Credential Exposure
Authored by Jim Becher | Site korelogic.com
An attacker armed with hardcoded API credentials from KL-001-2020-004 (CVE-2020-28329) can issue an authenticated query to display the admin password for the main...
Barco wePresent Authentication Bypass
Authored by Jim Becher | Site korelogic.com
The Barco wePresent WiPG-1600W version 2.5.1.8 web interface does not use session cookies for tracking authenticated sessions. Instead, the web interface uses a...
Barco wePresent Undocumented SSH Interface
Authored by Jim Becher | Site korelogic.com
Barco wePresent WiPG-1600W version 2.5.1.8 has an SSH daemon included in the firmware image. By default, the SSH daemon is disabled and does...
Barco wePresent Global Hardcoded Root SSH Password
Authored by Jim Becher | Site korelogic.com
Barco wePresent WiPG-1600W versions 2.5.1.8, 2.5.0.25, 2.5.0.24, and 2.4.1.19 have a hardcoded root password hash included in the firmware image.
advisories | CVE-2020-28334
Change Mirror...
Boxoft Convert Master 1.3.0 Local Buffer Overflow
Authored by Achilles
Boxoft Convert Master version 1.3.0 SEH local buffer overflow exploit.
Change Mirror Download
# Exploit Title: Boxoft Convert Master 1.3.0 - 'wav' SEH Local Exploit# Date: 17.09.2020# Vendor Homepage:...





