Tag: 0day

[webapps] LeptonCMS 4.5.0 – Persistent Cross-Site Scripting

[webapps] UliCMS 2020.1 – Persistent Cross-Site Scripting

[webapps] WordPress Plugin WPForms 1.5.9 – Persistent Cross-Site Scripting

[local] Veyon 4.3.4 – 'VeyonService' Unquoted Service Path

[webapps] UCM6202 1.0.18.13 – Remote Command Injection

[webapps] FIBARO System Home Center 5.021 – Remote File Include

[dos] ProficySCADA for iOS 5.0.25920 – 'Password' Denial of Service (PoC)

[dos] Google Chrome 80.0.3987.87 – Heap-Corruption Remote Denial of Service (PoC)

[remote] CyberArk PSMP 10.9.1 – Policy Restriction Bypass

[webapps] rConfig 3.9.4 – 'search.crud.php' Remote Command Injection