>> TAG: #0day

IOTransfer 4.0 – Remote Code Execution (RCE)

Dr. Fone 4.0.8 – ‘net_updater32.exe’ Unquoted Service Path

CodoForum v5.1 – Remote Code Execution (RCE)

OctoBot WebInterface 0.4.3 – Remote Code Execution (RCE)

Nginx 1.20.0 – Denial of Service (DOS)

WiFi Mouse 1.7.8.5 – Remote Code Execution(v2)

WordPress Plugin Weblizar 8.9 – Backdoor

WSO2 Management Console (Multiple Products) – Unauthenticated Reflected Cross-Site Scripting (XSS)

Mailhog 1.0.1 – Stored Cross-Site Scripting (XSS)

Marval MSM v14.19.0.12476 – Cross-Site Request Forgery (CSRF)