Tag: 0day

[webapps] WordPress Plugin Custom Global Variables 1.0.5 – 'name' Stored Cross-Site Scripting (XSS)

[webapps] OpenCart 3.0.36 – ATO via Cross Site Request Forgery

[webapps] Life Insurance Management System 1.0 – Multiple Stored XSS

[webapps] Online Doctor Appointment System 1.0 – Multiple Stored XSS

[webapps] Cockpit Version 234 – Server-Side Request Forgery (Unauthenticated)

[webapps] Apache Flink 1.11.0 – Unauthenticated Arbitrary File Read (Metasploit)

[local] dnsrecon 0.10.0 – CSV Injection

[webapps] WordPress Plugin Autoptimize 2.7.6 – Authenticated Arbitrary File Upload (Metasploit)

[webapps] WordPress Plugin wpDiscuz 7.0.4 – Unauthenticated Arbitrary File Upload (Metasploit)

[webapps] ECSIMAGING PACS 6.21.5 – Remote code execution