Remote compromise: XXE injection on thin client’s web servicesDuring one of our perimeter assessment exercises, we identified and exploited a vulnerability in an in-house developed thin client
cveCVE-2021-37749 - Hexagon GeoMedia WebMap 2020 Blind SQL InjectionSilentGrid identified a blind SQL injection vulnerability in Hexagon's GeoMedia WebMap 2020 solution
CVE to PoC – CVE-2017-0037PoC exploit for a type confusion issue in Internet Explorer 10, 11 and Edge