Tag: 0day

[webapps] Bolt CMS 3.7.0 – Authenticated Remote Code Execution

[webapps] LimeSurvey 4.1.11 – 'File Manager' Path Traversal

[local] AIDA64 Engineer 6.20.5300 – 'Report File' filename Buffer Overflow (SEH)

[webapps] Pandora FMS 7.0NG – 'net_tools.php' Remote Code Execution

[local] DiskBoss 7.7.14 – 'Input Directory' Local Buffer Overflow (PoC)

[dos] DiskBoss 7.7.14 – Denial of Service (PoC)

[local] 10Strike LANState 9.32 – 'Force Check' Buffer Overflow (SEH)

[dos] FlashFXP 4.2.0 Build 1730 – Denial of Service (PoC)

[webapps] Grandstream UCM6200 Series CTI Interface – 'user_password' SQL Injection

[remote] DLINK DWL-2600 – Authenticated Remote Command Injection (Metasploit)