Tag: 0day

[remote] KZTech/JatonTec/Neotel JT3500V 4G LTE CPE 2.0.1 – Weak Default WiFi Password Algorithm

[local] SAPSetup Automatic Workstation Update Service 750 – 'NWSAPAutoWorkstationUpdateSvc' Unquoted Service Path

[webapps] MyBB 1.8.25 – Chained Remote Command Execution

[dos] ProFTPD 1.3.7a – Remote Denial of Service

[webapps] Profiling System for Human Resource Management 1.0 – Remote Code Execution (Unauthenticated)

[local] BRAdmin Professional 3.75 – 'BRA_Scheduler' Unquoted Service Path

[webapps] VestaCP 0.9.8 – 'v_sftp_licence' Command Injection

[local] Eclipse Mosquitto MQTT broker 2.0.9 – 'mosquitto' Unquoted Service Path

[webapps] SOYAL Biometric Access Control System 5.0 – 'Change Admin Password' CSRF

[webapps] SOYAL Biometric Access Control System 5.0 – Master Code Disclosure