Tag: 0day

[webapps] phpPgAdmin 7.13.0 – COPY FROM PROGRAM Command Execution (Authenticated)

[dos] DD-WRT 45723 – UPNP Buffer Overflow (PoC)

[webapps] Zabbix 3.4.7 – Stored XSS

[webapps] CourseMS 2.1 – 'name' Stored XSS

[webapps] Openlitespeed 1.7.9 – 'Notes' Stored Cross-Site Scripting

[webapps] GetSimple CMS 3.3.16 – Reflected XSS to RCE

[webapps] Novel Boutique House-plus 3.5.1 – Arbitrary File Download

[webapps] WordPress Plugin WP Super Cache 1.7.1 – Remote Code Execution (Authenticated)

[webapps] TP-Link Devices – 'setDefaultHostname' Stored Cross-site Scripting (Unauthenticated)

[remote] vsftpd 3.0.3 – Remote Denial of Service