Tag: 0day

[local] SolarWinds MSP PME Cache Service 1.1.14 – Insecure File Permissions

[webapps] OpenZ ERP 3.6.60 – Persistent Cross-Site Scripting

[webapps] Victor CMS 1.0 – 'post' SQL Injection

[webapps] Online AgroCulture Farm Management System 1.0 – 'uname' SQL Injection

[webapps] Complaint Management System 1.0 – Authentication Bypass

[webapps] LibreNMS 1.46 – 'search' SQL Injection

[webapps] Pi-hole < 4.4 – Remote Code Execution

[webapps] Pi-hole < 4.4 – Remote Code Execution / Privileges Escalation

[dos] Extreme Networks Aerohive HiveOS 11.0 – Remote Denial of Service (PoC)

[webapps] Car Park Management System 1.0 – Authentication Bypass