Tag: 0day

[webapps] AMSS++ 4.7 – Backdoor Admin Account

[webapps] CandidATS 2.1.0 – Cross-Site Request Forgery (Add Admin)

[dos] Core FTP Lite 1.3 – Denial of Service (PoC)

[webapps] Easy2Pilot 7 – Cross-Site Request Forgery (Add User)

[webapps] Virtual Freer 1.58 – Remote Command Execution

[webapps] DBPower C300 HD Camera – Remote Configuration Disclosure

[webapps] WordPress Plugin WP Sitemap Page 1.6.2 – Persistent Cross-Site Scripting

[webapps] SOPlanning 1.45 – 'by' SQL Injection

[local] MSI Packages Symbolic Links Processing – Windows 10 Privilege Escalation

[webapps] Ice HRM 26.2.0 – Cross-Site Request Forgery (Add User)