19Tem
[webapps] ABB FlowX v4.00 – Exposure of Sensitive Information
ABB FlowX v4.00 – Exposure of Sensitive Information
ABB FlowX v4.00 – Exposure of Sensitive Information
CmsMadeSimple v2.2.17 – Stored Cross-Site Scripting (XSS)
Online Piggery Management System v1.0 – unauthenticated file upload vulnerability
Blackcat Cms v1.4 – Remote Code Execution (RCE)
TP-Link TL-WR740N – Authenticated Directory Transversal
CmsMadeSimple v2.2.17 – Remote Code Execution (RCE)
PimpMyLog v1.7.14 – Improper access control
An unidentified threat actor compromised an application used by multiple entities in Pakistan to deliver ShadowPad, a successor to the PlugX backdoor that’s commonly associated with Chinese hacking crews.
Targets included a Pakistan government entity, …