CVE-2021-30116: Insufficiently Protected Credentials

Kaseya VSA before 9.5.7 allows credential disclosure, as exploited in the wild in July 2021. By default Kaseya VSA on premise offers a download page where the clients for the installation can be downloaded. The default URL for this page is https://x.x.x.x/dl.asp When an attacker download a client...

numberone.com XSS vulnerability

Vulnerable URL: http://www.numberone.com/dl.asp?TV=1/-///'/"//--...