Tag: 0day

[remote] SolarView Compact 6.0 – OS Command Injection

[webapps] Showdoc 2.10.3 – Stored Cross-Site Scripting (XSS)

[remote] F5 BIG-IP 16.0.x – Remote Code Execution (RCE)

[webapps] Royal Event Management System 1.0 – 'todate' SQL Injection (Authenticated)

[webapps] College Management System 1.0 – 'course_code' SQL Injection (Authenticated)

[webapps] TLR-2005KSH – Arbitrary File Delete

[local] TCQ – ITeCProteccioAppServer.exe – Unquoted Service Path

[remote] SAP BusinessObjects Intelligence 4.3 – XML External Entity (XXE)

[remote] DLINK DIR850 – Insecure Access Control

[remote] Ruijie Reyee Mesh Router – Remote Code Execution (RCE) (Authenticated)