>> TAG: #0day

Sophos XG115w Firewall 17.0.10 MR-10 – Authentication Bypass

WordPress Plugin Testimonial Slider and Showcase 2.2.6 – Stored Cross-Site Scripting (XSS)

WordPress Plugin Netroics Blog Posts Grid 1.0 – Stored Cross-Site Scripting (XSS)

ThingsBoard 3.3.1 ‘description’ – Stored Cross-Site Scripting (XSS)

Prestashop blockwishlist module 2.1.0 – SQLi

Feehi CMS 2.1.1 – Stored Cross-Site Scripting (XSS)

ThingsBoard 3.3.1 ‘name’ – Stored Cross-Site Scripting (XSS)

PAN-OS 10.0 – Remote Code Execution (RCE) (Authenticated)

uftpd 2.10 – Directory Traversal (Authenticated)

WordPress Plugin Duplicator 1.4.7 – Information Disclosure