Tag: 0day

[webapps] Company Visitor Management System (CVMS) 1.0 – Authentication Bypass

[webapps] Restaurant Reservation System 1.0 – 'date' SQL Injection (Authenticated)

[webapps] aaPanel 6.6.6 – Privilege Escalation & Remote Code Execution (Authenticated)

[webapps] Vehicle Parking Management System 1.0 – Authentication Bypass

[webapps] rConfig 3.9.5 – Remote Code Execution (Unauthenticated)

[webapps] NodeBB Forum 1.12.2-1.14.2 – Account Takeover

[local] Guild Wars 2 – Insecure Folder Permissions

[webapps] berliCRM 1.0.24 – 'src_record' SQL Injection

[local] Battle.Net 1.27.1.12428 – Insecure File Permissions

[webapps] Small CRM 2.0 – 'email' SQL Injection