>> TAG: #0day

Reside Property Management 3.0 – ‘profile’ SQL Injection

Windscribe 1.83 – ‘WindscribeService’ Unquoted Service Path

OpenEMR 5.0.1 – ‘controller’ Remote Code Execution

KiteService 1.2020.618.0 – Unquoted Service Path

FHEM 6.0 – Local File Inclusion

mySCADA myPRO 7 – Hardcoded Credentials

BSA Radar 1.6.7234.24750 – Persistent Cross-Site Scripting

Responsive Online Blog 1.0 – ‘id’ SQL Injection

Online Student Enrollment System 1.0 – Cross-Site Request Forgery (Add Student)

Code Blocks 20.03 – Denial Of Service (PoC)