>> TAG: #0day

ExifTool 12.23 – Arbitrary Code Execution

WebTareas 2.4 – Blind SQLi (Authenticated)

e107 CMS v3.2.1 – Multiple Vulnerabilities

Microfinance Management System 1.0 – ‘customer_number’ SQLi

ManageEngine ADSelfService Plus Build 6118 – NTLMv2 Hash Exposure

TLR-2005KSH – Arbitrary File Upload

Gitlab 14.9 – Authentication Bypass

GitLab 14.9 – Stored Cross-Site Scripting (XSS)

Verizon 4G LTE Network Extender – Weak Credentials Algorithm

REDCap 11.3.9 – Stored Cross Site Scripting