Tag: 0day

[webapps] QiHang Media Web Digital Signage 3.0.9 – Cleartext Credential Disclosure

[webapps] QiHang Media Web Digital Signage 3.0.9 – Unauthenticated Arbitrary File Deletion

[webapps] QiHang Media Web Digital Signage 3.0.9 – Remote Code Execution (Unauthenticated)

[webapps] Artica Proxy 4.3.0 – Authentication Bypass

[webapps] GetSimple CMS Plugin Multi User 1.8.2 – Cross-Site Request Forgery (Add Admin)

[webapps] vBulletin 5.6.2 – 'widget_tabbedContainer_tab_panel' Remote Code Execution

[webapps] CMS Made Simple 2.2.14 – Authenticated Arbitrary File Upload

[webapps] Fuel CMS 1.4.7 – 'col' SQL Injection (Authenticated)

[webapps] Warehouse Inventory System 1.0 – Cross-Site Request Forgery (Change Admin Password)

[webapps] ManageEngine ADSelfService Build prior to 6003 – Remote Code Execution (Unauthenticated)