>> TAG: #0day

TapinRadio 2.13.7 – Denial of Service (PoC)

RarmaRadio 2.72.5 – Denial of Service (PoC)

vBulletin 5.6.3 – ‘group’ Cross Site Scripting

WordPress Plugin Canto 1.3.0 – Blind SSRF (Unauthenticated)

IDT PC Audio 1.0.6499.0 – ‘STacSV’ Unquoted Service Path

Composr CMS 10.0.34 – ‘banners’ Persistent Cross Site Scripting

MiniCMS 1.10 – ‘content box’ Stored XSS

Phpscript-sgh 0.1.0 – Time Based Blind SQL Injection

Testa Online Test Management System 3.4.7 – ‘q’ SQL Injection

Chromium 83 – Full CSP Bypass