Author: RedTeam Pentesting GmbH

Risk	Topic & Details
High	Creston Web Interface 1.0.0.2159 Credential Disclosure (CVE assigned) Remote \| 2022-01-18
Med.	Altova MobileTogether Server 7.3 XML External Entity Injection (XXE) (CVE assigned) Remote \| 2021-08-23
Med.	D-Link DSR-250N 3.12 Denial of Service (PoC) (CVE assigned) Remote \| 2020-10-09
High	WatchGuard Fireware AD Helper 5.8.5.10317 Credential Disclosure Remote \| 2020-03-14
Low	SugarCRM list privilege restriction bypass (CVE assigned) Remote \| 2011-03-18
High	nostromo nhttpd directory traversal leading to arbitrary command execution (CVE assigned) Remote \| 2011-03-18
Med.	Nostromo 1.9.3 Directory Traversal Remote \| 2011-03-17
Med.	IceWarp WebMail Server: Client-Side Specificationof \"Forgot Password\" eMail Content (CVE assigned) Remote \| 2009-05-06
Med.	IceWarp WebMail Server: SQL Injection inGroupware Component (CVE assigned) Remote \| 2009-05-06
Low	IceWarp WebMail Server: Cross Site Scripting inEmail View (CVE assigned) Remote \| 2009-05-06
Med.	ActiveWeb Contentserver CMS Clientside Filtering of Page Editor Content (CVE assigned) Local \| 2007-07-21
Med.	ActiveWeb Contentserver CMS Editor Permission Settings Problem (CVE assigned) Local \| 2007-07-21