Tag: 0day

[webapps] Mantis Bug Tracker 2.3.0 – Remote Code Execution (Unauthenticated)

[remote] Microsoft SQL Server Reporting Services 2016 – Remote Code Execution

[local] Windows TCPIP Finger Command – C2 Channel and Bypassing Security Software

[webapps] Piwigo 2.10.1 – Cross Site Scripting

[webapps] ThinkAdmin 6 – Arbitrarily File Read

[webapps] Tailor MS 1.0 – Reflected Cross-Site Scripting

[webapps] RAD SecFlow-1v SF_0290_2.3.01.26 – Persistent Cross-Site Scripting

[webapps] RAD SecFlow-1v SF_0290_2.3.01.26 – Cross-Site Request Forgery (Reboot)

[local] Rapid7 Nexpose Installer 6.6.39 – 'nexposeengine' Unquoted Service Path

[local] Pearson Vue VTS 2.3.1911 Installer – 'VUEApplicationWrapper' Unquoted Service Path