>> TAG: #0day

FUXA V.1.1.13-1186 – Unauthenticated Remote Code Execution (RCE)

File Replication Pro 7.5.0 – Privilege Escalation/Password reset due Incorrect Access Control

Lilac-Reloaded for Nagios 2.0.8 – Remote Code Execution (RCE)

ProjeQtOr Project Management System 10.3.2 – Remote Code Execution (RCE)

Serendipity 2.4.0 – Remote Code Execution (RCE) (Authenticated)

Piwigo 13.6.0 – Stored Cross-Site Scripting (XSS)

Serendipity 2.4.0 – Cross-Site Scripting (XSS)

InnovaStudio WYSIWYG Editor 5.4 – Unrestricted File Upload / Directory Traversal

Google Chrome Browser 111.0.5563.64 – AXPlatformNodeCocoa Fatal OOM/Crash (macOS)

Sielco Analog FM Transmitter 2.12 – Cross-Site Request Forgery