Contec CONPROSYS IoT Gateway 安全漏洞

Contec CONPROSYS IoT Gateway is an IoT gateway software from Contec Japan. A security vulnerability exists in Contec CONPROSYS IoT Gateway that stems from the presence of improper access control, which can be exploited by an attacker to access network maintenance pages to obtain network informati...

CVE-2022-25222

Money Transfer Management System Version 1.0 allows an unauthenticated user to inject SQL queries in 'admin/maintenance/managebranch.php' and 'admin/maintenance/managefee.php' via the 'id' parameter...

WordPress IgniteUp Cross-Site Scripting Vulnerability

The WordPress plugin IgniteUp is used to create "Coming Soon" and "Maintenance" mode pages. A stored cross-site scripting vulnerability exists in includes/class-coming-soon-creator.php in IgniteUp 3.4 and earlier versions. No detailed vulnerability details are available at this time...

h1-5411-CTF: h1-5411-CTF report: LFI / Deserialization / XXE vulnerability,

NOTE! Thanks for submitting a report! Please replace all the square sections below with the pertinent details. Remember, the more detail you provide, the easier it is for us to triage and respond quickly, so be sure to take your time filling out the report! Summary: h1-5411-ctf write-up The CTF...