Tag: 0day

[dos] jQuery UI 1.12.1 – Denial of Service (DoS)

[webapps] STVS ProVision 5.9.10 – File Disclosure (Authenticated)

[webapps] STVS ProVision 5.9.10 – Cross-Site Request Forgery (Add Admin)

[webapps] Openlitespeed Web Server 1.7.8 – Command Injection (Authenticated)

[webapps] Cemetry Mapping and Information System 1.0 – 'user_email' Sql Injection (Authentication Bypass)

[webapps] Simple College Website 1.0 – 'name' Sql Injection (Authentication Bypass)

[webapps] Simple College Website 1.0 – 'full' Stored Cross Site Scripting

[webapps] Tenda AC5 AC1200 Wireless – 'WiFi Name & Password' Stored Cross Site Scripting

[webapps] Oracle WebLogic Server 12.2.1.0 – RCE (Unauthenticated)

[webapps] Collabtive 3.1 – 'address' Persistent Cross-Site Scripting