>> TAG: #0day

rpc.py 0.6.0 – Remote Code Execution (RCE)

Dingtian-DT-R002 3.1.276A – Authentication Bypass

Asus GameSDK v1.0.0.4 – ‘GameSDK.exe’ Unquoted Service Path

Carel pCOWeb HVAC BACnet Gateway 2.1.0 – Directory Traversal

Geonetwork 4.2.0 – XML External Entity (XXE)

Schneider Electric SpaceLogic C-Bus Home Controller (5200WHC2) – Remote Code Execution

WordPress Plugin WP-UserOnline 2.87.6 – Stored Cross-Site Scripting (XSS)

WordPress Plugin Visual Slide Box Builder 3.2.9 – SQLi

Kite 1.2021.610.0 – Unquoted Service Path

Magnolia CMS 6.2.19 – Stored Cross-Site Scripting (XSS)