Month: April 2023

[local] Stonesoft VPN Client 6.2.0 / 6.8.0 – Local Privilege Escalation

[local] ActFax 10.10 – Unquoted Path Services

[webapps] Symantec Messaging Gateway 10.7.4 – Stored Cross-Site Scripting (XSS)

[webapps] Joomla! v4.2.8 – Unauthenticated information disclosure

[webapps] Palo Alto Cortex XSOAR 6.5.0 – Stored Cross-Site Scripting (XSS)

[local] RSA NetWitness Platform 12.2 – Incorrect Access Control / Code Execution

[webapps] Online-Pizza-Ordering -1.0 – Remote Code Execution (RCE)

[webapps] Online Appointment System V1.0 – Cross-Site Scripting (XSS)

[local] ESET Service 16.0.26.0 – 'Service ekrn' Unquoted Service Path

[webapps] Pentaho BA Server EE 9.3.0.0-428 – Remote Code Execution (RCE) (Unauthenticated)