Category: Security

[local] Foxit PDF Reader 11.0 – Unquoted Service Path

[webapps] Xerte 3.10.3 – Directory Traversal (Authenticated)

[webapps] Xerte 3.9 – Remote Code Execution (RCE) (Authenticated)

[remote] Prowise Reflect v1.0.9 – Remote Keystroke Injection

[webapps] Zyxel ZyWALL 2 Plus Internet Security Appliance – Cross-Site Scripting (XSS)

[remote] Printix Client 1.3.1106.0 – Remote Code Execution (RCE)

[webapps] Casdoor 1.13.0 – SQL Injection (Unauthenticated)

[webapps] Cipi Control Panel 3.1.15 – Stored Cross-Site Scripting (XSS) (Authenticated)

[local] Cobian Reflector 0.9.93 RC1 – 'Password' Denial of Service (PoC)

[local] Cobian Backup 11 Gravity 11.2.0.582 – 'Password' Denial of Service (PoC)