Tag: 0day

[local] LogonExpert 8.1 – 'LogonExpertSvc' Unquoted Service Path

[remote] Unified Remote 3.9.0.2463 – Remote Code Execution

[local] Softros LAN Messenger 9.6.4 – 'SoftrosSpellChecker' Unquoted Service Path

[dos] Product Key Explorer 4.2.7 – 'multiple' Denial of Service (PoC)

[webapps] Batflat CMS 1.3.6 – 'multiple' Stored XSS

[webapps] Monica 2.19.1 – 'last_name' Stored XSS

[remote] HFS (HTTP File Server) 2.3.x – Remote Command Execution (3)

[webapps] PEEL Shopping 9.3.0 – 'Comments/Special Instructions' Stored Cross-Site Scripting

[webapps] Comment System 1.0 – 'multiple' Stored Cross-Site Scripting

[webapps] Online Exam System With Timer 1.0 – 'email' SQL injection Auth Bypass