Tag: 0day

[remote] Neowise CarbonFTP 1.4 – Insecure Proprietary Password Encryption

[webapps] CSZ CMS 1.2.7 – Persistent Cross-Site Scripting

[webapps] PMB 5.6 – 'logid' SQL Injection

[local] Atomic Alarm Clock 6.3 – Stack Overflow (Unicode+SEH)

[webapps] Centreon 19.10.5 – 'id' SQL Injection

[webapps] Fork CMS 5.8.0 – Persistent Cross-Site Scripting

[local] Nsauditor 3.2.1.0 – Buffer Overflow (SEH+ASLR bypass (3 bytes overwrite))

[local] Rubo DICOM Viewer 2.0 – Buffer Overflow (SEH)

[local] Atomic Alarm Clock x86 6.3 – 'AtomicAlarmClock' Unquoted Service Path

[remote] Unraid 6.8.0 – Auth Bypass PHP Code Execution (Metasploit)