Tag: 0day

[webapps] SmartFoxServer 2X 2.17.0 – God Mode Console WebSocket XSS

[local] AMD Fuel Service – 'Fuel.service' Unquote Service Path

[local] SmartFoxServer 2X 2.17.0 – Credentials Disclosure

[webapps] WordPress Plugin Supsystic Ultimate Maps 1.1.12 – 'sidx' SQL injection

[webapps] WordPress Plugin Supsystic Backup 2.3.9 – Local File Inclusion

[webapps] LiteSpeed Web Server Enterprise 5.4.11 – Command Injection (Authenticated)

[webapps] PhreeBooks 5.2.3 ERP – Remote Code Execution (2)

[webapps] SEO Panel 4.6.0 – Remote Code Execution (2)

[webapps] Pixelimity 1.0 – 'password' Cross-Site Request Forgery

[webapps] Car Rental Project 2.0 – Arbitrary File Upload to Remote Code Execution