what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 2 of 2

Files from Mingshuo Li

SAP Cloud Connector 2.16.1 Missing Validation

Posted May 15, 2024

Authored by Mingshuo Li, Fabian Hagg | Site sec-consult.com

SAP Cloud Connector versions 2.15.0 through 2.16.1 were found to happily accept self-signed TLS certificates between SCC and SAP BTP.

tags | exploit

advisories | CVE-2024-25642

SHA-256 | bfc27f59ffa7a1d020eb1883e06f1b2a7891a0fff09f6afb7a4aef11cea69616

Download | Favorite | View

Progress Sitefinity 9.1 XSS / Session Management / Open Redirect

Posted Aug 23, 2017

Authored by Siddhartha Tripathy, Mingshuo Li | Site sec-consult.com

Progress Sitefinity version 9.1 suffers from cross site scripting, broken session management, and open redirection vulnerabilities.

tags | exploit, vulnerability, xss

SHA-256 | 6dba45f7f59d22b91a7da1e062d47503339c845d05f06925c38ebfe93cd3ddb8

Download | Favorite | View