Bus Pass Management System version 1.0 suffers persistent cross site scripting vulnerabilities.
>> AUTHOR: deepcore
Citrix versions 22.2.1.103 and 23.1.1.11 suffer from a local privilege escalation vulnerability.
http://tskhos.moph.go.th/web/images/images/xx.jpg notified by B1G0D1N
Osprey Pump Controller 1.0.1 – Cross-Site Request Forgery
Osprey Pump Controller 1.0.1 – (eventFileSelected) Command Injection
Osprey Pump Controller 1.0.1 – Unauthenticated Remote Code Execution Exploit
Mitel MiCollab AWV 8.1.2.4 and 9.1.3 – Directory Traversal and LFI
Agilebio Lab Collector Electronic Lab Notebook v4.234 – Remote Code Execution (RCE)
Unified Remote 3.13.0 – Remote Code Execution (RCE)
HospitalRun 1.0.0-beta – Local Root Exploit for macOS