>> TAG: #0day

Rumble Mail Server 0.51.3135 – ‘username’ Stored XSS

Gitlab 11.4.7 – Remote Code Execution

Openfire 4.6.0 – ‘sql’ Stored XSS

Jenkins 2.235.3 – ‘tooltip’ Stored Cross-Site Scripting

Openfire 4.6.0 – ‘groupchatJID’ Stored XSS

Openfire 4.6.0 – ‘users’ Stored XSS

Medical Center Portal Management System 1.0 – Multiple Stored XSS

PDF Complete 3.5.310.2002 – ‘pdfsvc.exe’ Unquoted Service Path

Library Management System 2.0 – Auth Bypass SQL Injection

Barcodes generator 1.0 – ‘name’ Stored Cross Site Scripting