patrickhener

3 exploits Active since Jul 2020
CVE-2020-14293 NOMISEC HIGH WORKING POC
Secudos DOMOS < 5.8 - Remote Code Execution via Zone Field Shell Metacharacters
conf_datetime in Secudos DOMOS 5.8 allows remote attackers to execute arbitrary commands as root via shell metacharacters in the zone field (obtained from the web interface).
1 stars
CVSS 7.5
CVE-2020-14294 NOMISEC MEDIUM WRITEUP
Secudos Qiata FTA < 1.70.19 - Stored Cross-Site Scripting via Comment Feature
An issue was discovered in Secudos Qiata FTA 1.70.19. The comment feature allows persistent XSS that is executed when reading transfer comments or the global notice board.
CVSS 6.1
CVE-2020-15492 NOMISEC CRITICAL WORKING POC
INNEO Startup TOOLS 12.0.66.3784-13.0.70.3804 - Unauthenticated Path Traversal via sut_srv.exe Web Application
An issue was discovered in INNEO Startup TOOLS 2017 M021 12.0.66.3784 through 2018 M040 13.0.70.3804. The sut_srv.exe web application (served on TCP port 85) includes user input into a filesystem access without any further validation. This might allow an unauthenticated attacker to read files on the server via Directory Traversal, or possibly have unspecified other impact.
CVSS 9.8