Category: Security

[dos] RarmaRadio 2.72.8 – Denial of Service (PoC)

[webapps] Gadget Works Online Ordering System 1.0 – 'Category' Persistent Cross-Site Scripting (XSS)

[webapps] WordPress Plugin Cookie Law Bar 1.2.1 – 'clb_bar_msg' Stored Cross-Site Scripting (XSS)

[local] DiskBoss Service 12.2.18 – 'diskbsa.exe' Unquoted Service Path

[dos] iDailyDiary 4.30 – Denial of Service (PoC)

[webapps] Schlix CMS 2.2.6-6 – Arbitary File Upload And Directory Traversal Leads To RCE (Authenticated)

[webapps] Microsoft Exchange 2019 – Unauthenticated Email Download (Metasploit)

[local] DELL dbutil_2_3.sys 2.3 – Arbitrary Write to Local Privilege Escalation (LPE)

[webapps] Spotweb 1.4.9 – DOM Based Cross-Site Scripting (XSS)

[local] Mozilla Firefox 88.0.1 – File Extension Execution of Arbitrary Code