Tag: 0day

[webapps] Exagate Sysguard 6001 – Cross-Site Request Forgery (Add Admin)

[local] VMware Fusion 11.5.2 – Privilege Escalation

[webapps] Netlink GPON Router 1.0.11 – Remote Code Execution

[remote] Rconfig 3.x – Chained Remote Code Execution (Metasploit)

[remote] ManageEngine Desktop Central – Java Deserialization (Metasploit)

[webapps] Enhanced Multimedia Router 3.0.4.27 – Cross-Site Request Forgery (Add Admin)

[webapps] PHPKB Multi-Language 9 – Authenticated Directory Traversal

[webapps] MiladWorkShop VIP System 1.0 – 'lang' SQL Injection

[webapps] PHPKB Multi-Language 9 – Authenticated Remote Code Execution

[webapps] PHPKB Multi-Language 9 – 'image-upload.php' Authenticated Remote Code Execution