Tag: 0day

[webapps] Scopia XT Desktop 8.3.915.4 – Cross-Site Request Forgery (change admin password)

[local] ShareMouse 5.0.43 – 'ShareMouse Service' Unquoted Service Path

[webapps] Cabot 0.11.12 – Persistent Cross-Site Scripting

[webapps] grocy 2.7.1 – Persistent Cross-Site Scripting

[webapps] ManageEngine Applications Manager 14700 – Remote Code Execution (Authenticated)

[local] Nord VPN-6.31.13.0 – 'nordvpn-service' Unquoted Service Path

[webapps] Savsoft Quiz Enterprise Version 5.5 – Persistent Cross-Site Scripting

[webapps] BloodX CMS 1.0 – Authentication Bypass

[webapps] Daily Tracker System 1.0 – Authentication Bypass

[webapps] SiteMagic CMS 4.4.2 – Arbitrary File Upload (Authenticated)