Tag: 0day

[dos] Notex the best notes 6.4 – Denial of Service (PoC)

[dos] Secure Notepad Private Notes 3.0.3 – Denial of Service (PoC)

[webapps] Stock Management System 1.0 – 'user_id' Blind SQL injection (Authenticated)

[local] Spy Emergency 25.0.650 – 'Multiple' Unquoted Service Path

[webapps] TextPattern CMS 4.8.7 – Remote Command Execution (Authenticated)

[webapps] OpenEMR 5.0.1.3 – 'manage_site_files' Remote Code Execution (Authenticated)

[local] WibuKey Runtime 6.51 – 'WkSvW32.exe' Unquoted Service Path

[webapps] Small CRM 3.0 – 'Authentication Bypass' SQL Injection

[webapps] OpenEMR 5.0.0 – Remote Code Execution (Authenticated)

[webapps] Microsoft SharePoint Server 16.0.10372.20060 – 'GetXmlDataFromDataSource' Server-Side Request Forgery (SSRF)