Tag: 0day

[webapps] Online Students Management System 1.0 – 'username' SQL Injections

[webapps] MedDream PACS Server 6.8.3.751 – Remote Code Execution (Unauthenticated)

[webapps] Liman 0.7 – Cross-Site Request Forgery (Change Password)

[webapps] Cisco ASA and FTD 9.6.4.42 – Path Traversal

[webapps] Kentico CMS 9.0-12.0.49 – Persistent Cross Site Scripting

[webapps] DynPG 4.9.1 – Persistent Cross-Site Scripting (Authenticated)

[webapps] openMAINT 1.1-2.4.2 – Arbitrary File Upload

[webapps] SEO Panel 4.6.0 – Remote Code Execution

[webapps] D-Link DSR-250N 3.12 – Denial of Service (PoC)

[webapps] Textpattern CMS 4.6.2 – 'body' Persistent Cross-Site Scripting