VulnCheck

BlueKitchen BTstack < 1.8.1 AVRCP Controller LIST_PLAYER_APPLICATION_SETTING_* Handlers OOB Read

OpenCATS PHP Code Injection via installer AJAX endpoint

GetSimpleCMS-CE < 3.3.22 Stored XSS via components.php

Xiaomi Galaxy FDS Android SDK <= 3.0.8 TLS Hostname Verification Disabled Enables MITM

QloApps 1.7.0 Weak Password Hashing via MD5 in Tools.php

OpenClinic GA 5.351.19 Reflected XSS via DICOM Image Upload Handler

OpenBullet2 0.3.2 Authenticated RCE via Job Configuration Interface

OpenBullet2 0.3.2 Authenticated RCE via FileProxySource Script Upload

OpenBullet2 0.3.2 Path Traversal via Wordlist Endpoint

QloApps 1.7.0 Stored XSS via SVG File Upload in Admin File Manager