>> TAG: #0day

Exagate Sysguard 6001 – Cross-Site Request Forgery (Add Admin)

VMware Fusion 11.5.2 – Privilege Escalation

Netlink GPON Router 1.0.11 – Remote Code Execution

Rconfig 3.x – Chained Remote Code Execution (Metasploit)

ManageEngine Desktop Central – Java Deserialization (Metasploit)

Enhanced Multimedia Router 3.0.4.27 – Cross-Site Request Forgery (Add Admin)

PHPKB Multi-Language 9 – Authenticated Directory Traversal

MiladWorkShop VIP System 1.0 – ‘lang’ SQL Injection

PHPKB Multi-Language 9 – Authenticated Remote Code Execution

PHPKB Multi-Language 9 – ‘image-upload.php’ Authenticated Remote Code Execution