Tag: 0day

[remote] rpc.py 0.6.0 – Remote Code Execution (RCE)

[webapps] Dingtian-DT-R002 3.1.276A – Authentication Bypass

[local] Asus GameSDK v1.0.0.4 – 'GameSDK.exe' Unquoted Service Path

[webapps] Carel pCOWeb HVAC BACnet Gateway 2.1.0 – Directory Traversal

[webapps] Geonetwork 4.2.0 – XML External Entity (XXE)

[remote] Schneider Electric SpaceLogic C-Bus Home Controller (5200WHC2) – Remote Code Execution

[webapps] WordPress Plugin WP-UserOnline 2.87.6 – Stored Cross-Site Scripting (XSS)

[webapps] WordPress Plugin Visual Slide Box Builder 3.2.9 – SQLi

[local] Kite 1.2021.610.0 – Unquoted Service Path

[webapps] Magnolia CMS 6.2.19 – Stored Cross-Site Scripting (XSS)