Author: nu11secur1ty

Country: bg

Reported research: 231

Advisories

Risk	Topic & Details
Med.	TENANT LIMITED-1.0-Multiple-SQLi + SQLi Bypass Authentication Remote \| 2025-03-13
High	NEXT-EMP v1.0-Copyright © 2024. All rights reserved. File Upload-FU and Remote Code Execution-RCE Remote \| 2025-01-29
Med.	OCLS MSMS-PHP (by: oretnom23 ) v1.0 -Copyright © 2025. All rights reserved. ### File Upload-FU and Remote Code Execution-RCE Vulnerabilities Remote Local \| 2025-01-21
Med.	OBS (by: oretnom23 ) File Upload-FU and Remote Remote Local \| 2025-01-18
Med.	banking-1.0-Copyright©2025-Multiple-SQLi Remote \| 2025-01-09
High	PHP - CPMS Version 2.0 File Upload and Remote Code Execution - RCE Vulnerabilities Remote \| 2025-01-07
Med.	PHP - CPMS Version 2.0 SQLi Remote \| 2025-01-05
Med.	Halo-2.20.12 LTS CORS Vulnerability Remote Local \| 2024-12-25
Med.	OLMS - PHP (by: oretnom23 ) v1.0 Copyright © 2024. All rights reserved SQLi - Bypass Authentication + File Upload vulnerability Remote Local \| 2024-12-22
Low	TikTok - web app CORS Vulnerability Remote \| 2024-12-22
Med.	XYZ-CSMS (by: oretnom23 ) v1.0 Copyright © 2024. All rights reserved SQLi - Bypass Authentication Remote Local \| 2024-12-16
Med.	Motorcycle Parts and Services Management System - MPSSMS- PHP (by: oretnom23 ) v1.0 Multiple-SQLi Remote Local \| 2024-12-05
Low	© 2024 Human Resource Management-1.0-HRM-1.0 Cross-site scripting (reflected) Remote \| 2024-11-18
High	© 2024 Human Resource Management-1.0-HRM-1.0 Multiple-SQLi Remote \| 2024-11-14
High	POMS-PHP (by: oretnom23 ) v1.0, Copyright © 2024. All rights reserved - File Upload Vulnerability exploit Remote \| 2024-11-11
Med.	POMS-PHP (by: oretnom23 ) v1.0, Copyright © 2024. All rights reserved - SQLi Bypass Authentication Remote \| 2024-11-11
Med.	UP-RESULT[pro-1.0] Multiple-SQLi Remote Local \| 2024-10-28
Med.	dolibarr 20.0.1 Multiple security token SQLi Remote Local \| 2024-10-16
Med.	SCRMS 2024-10-07 Multiple-SQLi Remote \| 2024-10-07
High	LMS2024-1.0 XSS-Reflected Information Disclosure Remote Local \| 2024-10-05
Med.	OVAS - PHP (by: oretnom23 ) v1.0 Multiple-SQLi Remote \| 2024-09-18
Med.	Cab Management System-1.0 Multiple-SQLi Remote \| 2024-09-18
Low	SFTRS - PHP (by: oretnom23 ) v1.0 Multiple-SQLi Remote Local \| 2024-09-16
Med.	TENANT-LIMITED-1.0-©-2024-Tenant-Management-System-Software Multiple-SQLi Remote Local \| 2024-09-12
High	NDTaskmatic-1.0-2024-by Mayuri.K Multiple-SQLi Remote Local \| 2024-08-26
Med.	used_car_showroom-1.0-2024 Multiple-SQLi Remote \| 2024-08-21
Med.	courier-management-system-2020-1.0 Multiple-SQLi Remote Local \| 2024-08-12
Med.	eduAuthorities-1.0 Multiple-SQLi Remote \| 2024-08-06
High	Microsoft Office 365 Remote Code Execution (CVE assigned) Remote \| 2024-07-09
Med.	PMS-2024 - PHP (by: oretnom23 ) v1.0 Multiple SQLi Remote \| 2024-07-06

Author: nu11secur1ty

Country: bg

Reported research: 231

Advisories

Med.

Remote | 2025-03-13

High

Remote | 2025-01-29

Med.

Remote Local | 2025-01-21

Med.

Remote Local | 2025-01-18

Med.

Remote | 2025-01-09

High

Remote | 2025-01-07

Med.

Remote | 2025-01-05

Med.

Remote Local | 2024-12-25

Med.

Remote Local | 2024-12-22

Low

Remote | 2024-12-22

Med.

Remote Local | 2024-12-16

Med.

Remote Local | 2024-12-05

Low

Remote | 2024-11-18

High

Remote | 2024-11-14

High

Remote | 2024-11-11

Med.

Remote | 2024-11-11

Med.

Remote Local | 2024-10-28

Med.

Remote Local | 2024-10-16

Med.

Remote | 2024-10-07

High

Remote Local | 2024-10-05

Med.

Remote | 2024-09-18

Med.

Remote | 2024-09-18

Low

Remote Local | 2024-09-16

Med.

Remote Local | 2024-09-12

High

Remote Local | 2024-08-26

Med.

Remote | 2024-08-21

Med.

Remote Local | 2024-08-12

Med.

Remote | 2024-08-06

High

Microsoft Office 365 Remote Code Execution (CVE assigned)

Remote | 2024-07-09

Med.

Remote | 2024-07-06

Do you know.. we can display your:

- Twitter Link - Website Link - Zone-H Link - Description of profile - email (let us know if you want show public)

Let's us know! submit@cxsec.org

- Twitter Link
- Website Link
- Zone-H Link
- Description of profile
- email (let us know if you want show public)