Tag: 0day

[webapps] IncomCMS 2.0 – Insecure File Upload

[webapps] Resumes Management and Job Application Website 1.0 – Authentication Bypass (Sql Injection)

[webapps] WordPress Plugin Stripe Payments 2.0.39 – 'AcceptStripePayments-settings[currency_code]' Stored XSS

[webapps] WordPress Plugin WP-Paginate 2.1.3 – 'preset' Stored XSS

[webapps] Online Movie Streaming 1.0 – Authentication Bypass

[webapps] Responsive ELearning System 1.0 – 'id' Sql Injection

[local] MiniTool ShadowMaker 3.2 – 'MTAgentService' Unquoted Service Path

[dos] Easy CD & DVD Cover Creator 4.13 – Denial of Service (PoC)

[webapps] sar2html 3.2.1 – 'plot' Remote Code Execution

[webapps] WordPress Core 5.2.2 – 'post previews' XSS