fuzzKitty

Vulnerable Product Version: SVI MS Management System - All versions
Vendor: https://www.squire-technologies.co.uk/
Vulnerability Type: CWE-502 - Deserialization of Untrusted Data
Description: The Java Remote Management Interface of all versions of SVI MS
Management System was discovered to contain a vulnerability due to
insecure deserialization of user-supplied content, which can allow
attackers to execute arbitrary code via a crafted serialized Java
object.

Discovered by:

fuzzKitty

Vulnerable Product Version: Orlansoft ERP Java Remote Management Interface - All versions
Vendor: https://orlansoft.com/
Vulnerability Type: CWE-502 - Deserialization of Untrusted Data
Description: The Java Remote Management Interface of all versions of Orlansoft ERP
was discovered to contain a vulnerability due to insecure
deserialization of user-supplied content, which can allow attackers to
execute arbitrary code via a crafted serialized Java object.

Discovered by:
Omri Inbar, Shlomo Ben Yosef, Tal Sheinfeld

fuzzKitty

Vulnerable Product Version: Xtend Voice Logger - 1.0
Vendor: http://www.xtendtech.com/
Vulnerability Type: Cross Site Scripting (XSS)
Description: A reflected cross site scripting (XSS) vulnerability in Xtend Voice
Logger 1.0 allows attackers to execute arbitrary web scripts or HTML
via the path of the error page.

Discovered by:
Omri Inbar, Shlomo Ben Yosef

fuzzKitty

CVE-2020-23617
Vulnerable Product Version: Totolink N200RE and N100RE Routers - 2.0
Vendor: http://totolink.net/
Vulnerability Type: Cross Site Scripting (XSS)
Description: A cross site scripting (XSS) vulnerability in ther error page of
Totolink N200RE and N100RE Routers 2.0 allows attackers to execute
arbitrary web scripts or HTML via a SCRIPT element.

Discovered by:
Omri Inbar, Shlomo Ben Yosef