[webapps] Scriptcase 9.7 – Remote Code Execution (RCE)
Posted by deepcore under Security (No Respond)
Archive for April, 2022
[webapps] Easy Appointments 1.4.2 – Information Disclosure
Posted by deepcore under Security (No Respond)
[remote] Zyxel NWA-1100-NH – Command Injection
Posted by deepcore under Security (No Respond)
[webapps] WordPress Plugin Motopress Hotel Booking Lite 4.2.4 – SQL Injection
Posted by deepcore under Security (No Respond)
[local] Microsoft Exchange Mailbox Assistants 15.0.847.40 – 'Service MSExchangeMailboxAssistants' Unquoted Service Path
Posted by deepcore under Security (No Respond)
Microsoft Exchange Mailbox Assistants 15.0.847.40 – ‘Service MSExchangeMailboxAssistants’ Unquoted Service Path
Tags: 0day, remote exploit[local] EaseUS Data Recovery – 'ensserver.exe' Unquoted Service Path
Posted by deepcore under Security (No Respond)
[local] Microsoft Exchange Active Directory Topology 15.0.847.40 – 'Service MSExchangeADTopology' Unquoted Service Path
Posted by deepcore under Security (No Respond)
Microsoft Exchange Active Directory Topology 15.0.847.40 – ‘Service MSExchangeADTopology’ Unquoted Service Path
Tags: 0day, remote exploit[local] PTPublisher v2.3.4 – Unquoted Service Path
Posted by deepcore under Security (No Respond)
[remote] ManageEngine ADSelfService Plus 6.1 – User Enumeration
Posted by deepcore under Security (No Respond)
[webapps] WordPress Plugin Videos sync PDF 1.7.4 – Stored Cross Site Scripting (XSS)
Posted by deepcore under Security (No Respond)
WordPress Plugin Videos sync PDF 1.7.4 – Stored Cross Site Scripting (XSS)
Tags: 0day, remote exploit