Frank Breedijk (DIVD)

Feathers - Improper parameter filtering in the Feathers js library, which may ultimately lead to SQL injection

Feathers - Query “__proto__” is converted to real prototype

ITarian - Local privilege escalation in Endpoint Manager agent on Windows

White Rabbit Switch - Password Disclosure Vulnerability

White Rabbit Switch - Unauthenticated remote code execution

DoS attack when broadcasting billboard messages

Command Injection through Unsafe File Name Evaluation in internal script in Enphase IQ Gateway v4.x to and including 8.x

Unauthenticated Path Traversal via URL Parameter in Enphase IQ Gateway version < 8.2.4225

URL parameter manipulations allows an authenticated attacker to execute arbitrary OS commands in Enphase IQ Gateway version 4.x <= 7.x

URL parameter manipulations allows an authenticated attacker to execute arbitrary OS commands in Enphase IQ Gateway v4.x to v8.x and < v8.2.4225