Tag: 0day

[webapps] Seacms 11.1 – 'ip and weburl' Remote Command Execution

[local] System Explorer 7.0.0 – 'SystemExplorerHelpService' Unquoted Service Path

[webapps] Seacms 11.1 – 'checkuser' Stored XSS

[webapps] Seacms 11.1 – 'file' Local File Inclusion

[webapps] WordPress Plugin Total Upkeep 1.14.9 – Database and Files Backup Download

[webapps] Rumble Mail Server 0.51.3135 – 'servername' Stored XSS

[webapps] Rumble Mail Server 0.51.3135 – 'domain and path' Stored XSS

[webapps] LibreNMS 1.46 – MAC Accounting Graph Authenticated SQL Injection

[webapps] Rukovoditel 2.6.1 – Cross-Site Request Forgery (Change password)

[webapps] Macally WIFISD2-2A82 2.000.010 – Guest to Root Privilege Escalation