Tag: 0day

[remote] IOTransfer 4.0 – Remote Code Execution (RCE)

[local] Dr. Fone 4.0.8 – 'net_updater32.exe' Unquoted Service Path

[webapps] CodoForum v5.1 – Remote Code Execution (RCE)

[webapps] OctoBot WebInterface 0.4.3 – Remote Code Execution (RCE)

[remote] Nginx 1.20.0 – Denial of Service (DOS)

[remote] WiFi Mouse 1.7.8.5 – Remote Code Execution(v2)

[webapps] WordPress Plugin Weblizar 8.9 – Backdoor

[webapps] WSO2 Management Console (Multiple Products) – Unauthenticated Reflected Cross-Site Scripting (XSS)

[webapps] Mailhog 1.0.1 – Stored Cross-Site Scripting (XSS)

[remote] Marval MSM v14.19.0.12476 – Cross-Site Request Forgery (CSRF)