Author: Aryan Chehreghani

Country: ir

Reported research: 29

Advisories

Risk	Topic & Details
High	Instagram App 287.0.0.22.85 - Local Stack Buffer Overflow (DOS) Local \| 2023-06-15
High	DSL-124 Wireless N300 ADSL2+ - Backup File Disclosure Remote \| 2023-04-02
Med.	Sophos XG115w Firewall 17.0.10 MR-10 Authentication Bypass (CVE assigned) Remote \| 2022-08-11
Med.	Seowon SLR-120 Router - Remote Code Execution (Unauthenticated) (CVE assigned) Remote Local \| 2022-03-11
High	Google Play Protect 22.4.25 Detection Bypass Local \| 2022-02-16
Med.	Cain & Abel 4.9.56 - Unquoted Service Path Local \| 2022-02-14
Low	Subrion CMS 4.2.1 Cross Site Request Forgery Remote \| 2022-02-12
Med.	WordPress Core 5.8.2 - 'WP_Query' SQL Injection (CVE assigned) Remote \| 2022-01-13
High	ALFA TEAM SHELL TESLA 4.1 - Remote Code Execution (Unauthenticated) Remote Local \| 2021-12-19
Med.	Money Transfer Management System 1.0 Authentication Bypass Remote \| 2021-11-30
Low	HTTPDebuggerPro 9.11 - Unquoted Service Path Local \| 2021-11-26
Med.	Purchase Order Management System 1.0 - Remote File Upload Remote \| 2021-11-25
Med.	HTTPDebuggerPro 9.11 Unquoted Service Path Local \| 2021-11-24
Med.	Money Transfer Management System 1.0 SQL Injection Remote \| 2021-11-08
Med.	Cmder Console Emulator 1.3.18 - Denial-of-Service (PoC) Remote Local \| 2021-10-09
Med.	Cyberfox Web Brwoser 52.9.1 Denial Of Service Remote \| 2021-09-27
High	Seowon 130-SLC router - 'queriesCnt' Remote Code Execution (Unauthenticated) Remote Local \| 2021-09-15
Med.	Bus Pass Management System 1.0 - 'viewid' SQL Injection Remote Local \| 2021-08-30
Med.	MobinNet Router- Remote Code Execution Remote \| 2021-08-11
Low	WordPress Picture Gallery 1.4.2 Cross Site Scripting Remote \| 2021-08-10
Low	WordPress Plugin WP Customize Login 1.1 - 'Change Logo Title' Stored Cross-Site Scripting (XSS) Remote \| 2021-08-06
Med.	Testa Online Test Management System 3.4.5 - 'q' SQL Injection Remote Local \| 2021-08-03
Med.	Testa CMS 3.4.3 - 'q' SQL Injection Remote Local \| 2021-08-03
Med.	hamayeshnegar CMS 10.0.5 - Authentication Bypass Remote Local \| 2021-07-24
Med.	Registration & Login and User Management System With admin panel - SQL Injection (Auth Bypass) Remote \| 2021-07-19
Med.	Design and Development of Saba website - SQL Injection Remote Local \| 2021-07-17
Med.	Testa Online - (V 3.4.6 ) SQL Injection Remote Local \| 2021-07-17
Med.	News website CMS SQL injection & Bypass Admin Panel & XSS Vulnerability & Remote code Execution By Aryan Chehreghani (CVE assigned) Remote \| 2020-06-05
Med.	Websites of Iranian travel agencies By Aryan chehreghani Remote \| 2020-05-26

Author: Aryan Chehreghani

Country: ir

Reported research: 29

Advisories

High

Local | 2023-06-15

High

Remote | 2023-04-02

Med.

Sophos XG115w Firewall 17.0.10 MR-10 Authentication Bypass (CVE assigned)

Remote | 2022-08-11

Med.

Seowon SLR-120 Router - Remote Code Execution (Unauthenticated) (CVE assigned)

Remote Local | 2022-03-11

High

Local | 2022-02-16

Med.

Local | 2022-02-14

Low

Remote | 2022-02-12

Med.

WordPress Core 5.8.2 - 'WP_Query' SQL Injection (CVE assigned)

Remote | 2022-01-13

High

Remote Local | 2021-12-19

Med.

Remote | 2021-11-30

Low

Local | 2021-11-26

Med.

Remote | 2021-11-25

Med.

Local | 2021-11-24

Med.

Remote | 2021-11-08

Med.

Remote Local | 2021-10-09

Med.

Remote | 2021-09-27

High

Remote Local | 2021-09-15

Med.

Remote Local | 2021-08-30

Med.

Remote | 2021-08-11

Low

Remote | 2021-08-10

Low

Remote | 2021-08-06

Med.

Remote Local | 2021-08-03

Med.

Remote Local | 2021-08-03

Med.

Remote Local | 2021-07-24

Med.

Remote | 2021-07-19

Med.

Remote Local | 2021-07-17

Med.

Remote Local | 2021-07-17

Med.

News website CMS SQL injection & Bypass Admin Panel & XSS Vulnerability & Remote code Execution By Aryan Chehreghani (CVE assigned)

Remote | 2020-06-05

Med.

Remote | 2020-05-26

Do you know.. we can display your:

- Twitter Link - Website Link - Zone-H Link - Description of profile - email (let us know if you want show public)

Let's us know! submit@cxsec.org

- Twitter Link
- Website Link
- Zone-H Link
- Description of profile
- email (let us know if you want show public)