Stux

NomStux
S'inscrire02/02/2023
Points Communautaires422
Commits1
Soumet31
Des Postes0
Vote Favorable0
RangExpert
Activity Badges
💻 Digital Nomad (2x)
🔬 Researcher
🐘 Heavy User
🖖 Community Member (8x)
👋 Regular Visitor (3x)
📤 Submitter (4x)

Soumet (31)

Chronologie (31)

IDTitreSoumissionModérerEntréePStatut
501840vtiger Vtiger CRM 6.4.0 Reflected Cross-Site Scripting15/02/202523/02/202529660817Accepté
496171SIAM Industria de Automação e Monitoramento Ltda. SIAM 2.0 Reflected Cross-Site Scripting06/02/202515/02/202529596720Accepté
496141Pix Software Vivaz 6.0.10 Cross-Site Request Forgery06/02/202515/02/202529596617Accepté
493492Allims Lab.Online Latest SQL Injection With High Privileges01/02/202510/02/202529506120Accepté
493482Pix Software Vivaz 6.0.10 SQL Injection01/02/202510/02/202529506017Accepté
475741Xxxx Xxxxx Xxxxxxx X Xxxxxxxxx Xxxxx-xxxx Xxxxxxxxx07/01/202508/01/2025
 
0Rejeté
475602Mobotix M15 MX-V4.3.4.83 Reflected Cross-Site Scripting06/01/202519/01/202529254117Accepté
473865Virtual Computer SA Vysual RH Solution 2024.12.1 Reflected Cross-Site Scripting02/01/202514/01/202529147520Accepté
473785Mitel MiVoice Office 400 MiVoice Office 400 Cross-Site Scripting02/01/202512/01/20251258850Dupliqué
400844Grocy 4.2.0 Authenticated Stored Cross-Site Scripting via Break of Control31/08/202401/09/202427627420Accepté
388118Xxxxxxx X.x.x (xxxxxx) Xxxxxxxxxxxxx Xxxxx Xxxx Xxxxxxxxx08/08/202409/08/2024
 
0Rejeté
387606Scada-LTS 2.7.8 (Last) Stored Cross-Site Scripting07/08/202416/08/202427490920Accepté
375614Intelbras InControl 2.21.57 (last version) Command Injection16/07/202428/09/202427882820Accepté
358596ZKTeco ZKBio CVSecurity V5000 V5000 4.1.0 Stored Cross-Site Scripting17/06/202426/06/202426973320Accepté
353502Intelbras InControl 2.21.56 Unquoted Service Path via "incontrolWebcam" Service10/06/202417/06/202426882220Accepté
351403ZKTeco ZKBio CVSecurity 4.1.0 Stored Cross-Site Scripting06/06/202414/06/202426869420Accepté
351241ZKTeco ZKBio CVSecurity V5000 4.1.0 Filter Bypass leads Stored Cross-Site Scripting to PrivEsc06/06/202414/06/202426869320Accepté
261961Xxxx-xxxxxxx Xxxx Xxx X > Xxxxxxxxx Xxxxx-xxxx Xxxxxxxxx03/01/202403/01/2024
 
0Rejeté
201562Reflected Cross-Site Scripting on Shopicial App30/08/202315/09/202323979417Accepté
162093Xxxxxxxxx Xxxxx-xxxx Xxxxxxxxx Xx Xxx-xxx Xxxxxxxx, Xxxxxxxxxx Xxxxxxxxx29/05/202329/05/2023
 
0Rejeté
152938Gira HomeServer v4 Reflected Cross-Site Scripting06/05/202316/05/202322915020Accepté
150588TOTVS Food Service - Stored Cross-Site Scripting in SMS Messaging function30/04/202330/04/202322775820Accepté
150587TOTVS Food Service - BAC + IDOR leads to unauthorized access to sms messages from other companies.30/04/202330/04/202322775920Accepté
148296Control iD RH iD v23.3.19.0 - Broken Access Control allows a low-privilege user access to high-privilege functions25/04/202304/05/202322801520Accepté
115718Control iD RH iD v23.3.19.0 - Authenticated Stored Cross-Site Scripting in the "Name" field in the "/v2/#/add/department" function18/04/202328/04/202322771820Accepté
110414Xx Xxxxxx Xxx X Xxxxxx-xxxx Xxxxxxx Xxxxxxx Xxxxxxxxxxxxx Xx Xxx Xx/xxx Xxxxx05/04/202306/04/2023
 
0Rejeté
110406iDSecure Stored Cross-Site Scripting in "Dispositivos>Adicionar" field "IP/DNS".05/04/202314/04/202322592220Accepté
107434Xxxxxãx Xxx Xxxxx Xx.x.x Xxx Xx.x.x Xxxxxx Xxxxxx Xxxxxxx Xxxxx Xx Xxxxxxx Xxxx29/03/202304/04/2023
 
0Rejeté
106063Control iD v23.3.19.0 SQL Injection via parameter JSON email (PUT) in Edit Operators.26/03/202314/04/202322592117Accepté
84007Xxxxxx Xxxxxx-xxxx Xxx Xxxxxxxx X.x.xx.x - Xxxxxx Xxxxx-xxxx Xxxxxxxxx Xx Xxxxx 04/02/202304/02/2023
 
0Rejeté
82473Xxxxx X-xxxx Xx Xxxxxxxxx Xxxxx-xxxx Xxxxxxxxx02/02/202302/02/2023
 
0Rejeté

Commits (1)

IDEntréeCVEMise à jourModérerCP
19381368Allims lab.online model_recuperar_senha.php injection SQLCVE-2025-115710/02/202510/02/202510

◂ PrécédentAperçuSuivant ▸

Might our Artificial Intelligence support you?

Check our Alexa App!