Wietse Boonstra (DIVD)

Stored XSS in SmarterTrack v100.0.8019.14010

Reflective XSS on SmarterTrack v100.0.8019.14010

ITarian - Session cookie not protected by HttpOnly flag

ITarian - Any user with a valid session token can create and execute agent procedures and bypass mandatory approvals

ITarian - Local privilege escalation in Endpoint Manager agent on Windows

Remote Code Execution through File Upload in SOPlanning before 1.52.02

Remote Code Execution through File Upload in SOPlanning before 1.52.02

Insecure Direct Object Reference to export Database in SOPlanning before 1.52.02

SQL Injection in SOPlanning before 1.52.02

Command Injection through Unsafe File Name Evaluation in internal script in Enphase IQ Gateway v4.x to and including 8.x