>> TAG: #0day

Seacms 11.1 – ‘ip and weburl’ Remote Command Execution

System Explorer 7.0.0 – ‘SystemExplorerHelpService’ Unquoted Service Path

Seacms 11.1 – ‘checkuser’ Stored XSS

Seacms 11.1 – ‘file’ Local File Inclusion

WordPress Plugin Total Upkeep 1.14.9 – Database and Files Backup Download

Rumble Mail Server 0.51.3135 – ‘servername’ Stored XSS

Rumble Mail Server 0.51.3135 – ‘domain and path’ Stored XSS

LibreNMS 1.46 – MAC Accounting Graph Authenticated SQL Injection

Rukovoditel 2.6.1 – Cross-Site Request Forgery (Change password)

Macally WIFISD2-2A82 2.000.010 – Guest to Root Privilege Escalation