Frank Breedijk (DIVD)

MQTT implementation in Sungrow iSolarCloud allowed users to subscribe to all data of all connected inverters

Qlik Sense Enterprise Domain User enumeration

Reflected XSS in Axiell Iguana CMS

SQL-injection in admin_login_handler allows unauthenticated user to log in as an administrator in SicommNet BASEC

XSS, HTML and Style injection on login page

Insecure password storage in SicommNet BASEC

Reflected XSS in Axiell Iguana CMS

Reflected POST XSS in Axiell Iguana CMS

Sequalize - Default support for “raw attributes” when using parentheses

Sequalize - Bad query filtering leading to SQL errors