Zero Science Lab

Macedonian Information Security Research And Development Laboratory

[Zero Science Lab @zeroscience]

Vuln: Lyrion Music Server 9.2.0 (search.*) Multiple Script Insertions - https://t.co/ZlglMinb7Z

[Zero Science Lab @zeroscience]

Vuln: Lyrion Music Server 9.2.0 Path Traversal File Read - https://t.co/I2jnpcC1sG

[Zero Science Lab @zeroscience]

Vuln: Lyrion Music Server 9.2.0 Arbitrary Directory Listing - https://t.co/hDSaDYu21M

[Zero Science Lab @zeroscience]

Vuln: Lyrion Music Server 9.2.0 (metadata) Stored XSS - https://t.co/Nr8C4Z993T

[Zero Science Lab @zeroscience]

Vuln: Lyrion Music Server 9.2.0 (server.log) Unauthenticated Stored XSS - https://t.co/f1OON7AiAg

[Zero Science Lab @zeroscience]

Vuln: Lyrion Music Server 9.2.0 (server.log) Unauthenticated Reflected XSS - https://t.co/GXd6ut2BQQ

[Zero Science Lab @zeroscience]

FIFOFox v1.2.3 (ilegnisi) - Windows named-pipe security auditor and fuzzer - https://t.co/lPQ6J2twF0

[Zero Science Lab @zeroscience]

Vuln: Lightweight Music Server (LMS) 3.76.0 (metadata) Stored XSS - https://t.co/l3lTeRoBZk

[Zero Science Lab @zeroscience]

Vuln: Pachno 1.0.6 FileCache Deserialization Remote Code Execution - https://t.co/fcnE1YIPHm

[Zero Science Lab @zeroscience]

Vuln: Pachno 1.0.6 (runSwitchUser()) Remote Vertical Privilege Escalation - https://t.co/wLLtDg9Y3C

[Zero Science Lab @zeroscience]

Vuln: Pachno 1.0.6 Wiki TextParser XXE Vulnerability - https://t.co/e24jL9LQxz

[Zero Science Lab @zeroscience]

Vuln: Pachno 1.0.6 Cross-Site Request Forgery - https://t.co/DAEXkFxXVJ

[Zero Science Lab @zeroscience]

Vuln: Pachno 1.0.6 (uploadfile) Unrestricted File Upload Remote Code Execution - https://t.co/rQqgr02dZE

[Zero Science Lab @zeroscience]

Vuln: Pachno 1.0.6 (return_to) Open Redirection - https://t.co/OF1r45QuSb

[Zero Science Lab @zeroscience]

Vuln: Pachno 1.0.6 Stored Cross-Site Scripting - https://t.co/POAzQzpY6R

[Zero Science Lab @zeroscience]

https://t.co/Norp59Gorp - 3.0 released.

[Zero Science Lab @zeroscience]

Vuln: Honeywell Trend IQ4xx BMS Controller Unauthenticated Remote Web-HMI Control And Lockout - https://t.co/bKUwIHhHOV

[Zero Science Lab @zeroscience]

Vuln: Tattile Cameras 1.181.5 Unauthenticated RTSP Stream Disclosure - https://t.co/u16jlGLhra

[Zero Science Lab @zeroscience]

Vuln: Tattile Cameras 1.181.5 Use of Default Credentials - https://t.co/X5edlvdfyH

[Zero Science Lab @zeroscience]

Vuln: Tattile Cameras 1.181.5 Insufficient Token (X-User-Token) Expiration - https://t.co/hiCTGq0ww8