Author: Alexandre Zanni

Country: fr

About:

I'm a Cybersecurity engineer, security auditor, pentester and ethical hacker. Also I'm a staff member of the RTFM association and a developer of BlackArch Linux.

Twitter: https://twitter.com/noraj_rawsec
Website: https://pwn.by/noraj/

Reported research: 10

Advisories

Risk	Topic & Details
High	iTop < 2.7.6 - (Authenticated) Remote command execution (CVE assigned) Remote \| 2022-05-22
Low	Easy!Appointments Information Disclosure (CVE assigned) Remote \| 2022-04-15
High	Monitorr 1.7.6m Bypass / Information Disclosure / Shell Upload Remote \| 2021-06-24
Med.	OpenNetAdmin 8.5.14 <= 18.1.1 - Remote Command Execution Remote \| 2021-05-07
High	Fuel CMS 1.4 - Remote Code Execution (CVE assigned) Remote \| 2020-11-15
High	Bludit 3.9.2 Authentication Bruteforce Mitigation Bypass (CVE assigned) Remote \| 2020-08-17
High	Umbraco CMS 7.12.4 - (Authenticated) Remote Code Execution Remote \| 2020-08-02
Low	OpenEMR <= 5.0.1 - (Authenticated) Remote Code Execution Remote \| 2020-08-02
Low	AtMail Email Server Appliance 6.4 - Exploit toolchain (XSS > CSRF > RCE) Remote \| 2020-08-02
Low	Alfresco 5.2.4 Cross Site Scripting (CVE assigned) Remote \| 2020-03-04

Copyright 2024, cxsecurity.com