Tag: 0day

[webapps] rConfig 3.9.6 – Arbitrary File Upload to Remote Code Execution (Authenticated)

[webapps] SEO Panel 4.8.0 – 'order_col' Blind SQL Injection

[webapps] Hestia Control Panel 1.3.2 – Arbitrary File Write

[webapps] WoWonder Social Network Platform 3.1 – 'event_id' SQL Injection

[webapps] VestaCP 0.9.8 – File Upload CSRF

[local] GeoGebra Graphing Calculato‪r‬ 6.0.631.0 – Denial Of Service (PoC)

[webapps] Alphaware E-Commerce System 1.0 – Unauthenicated Remote Code Execution (File Upload + SQL injection)

[local] GeoGebra Classic 5.0.631.0-d – Denial of Service (PoC)

[local] GeoGebra CAS Calculato‪r‬ 6.0.631.0 – Denial of Service (PoC)

[local] GeoGebra 3D Calculator 5.0.511.0 – Denial of Service (PoC)