Tag: 0day

[webapps] WordPress InfiniteWP – Client Authentication Bypass (Metasploit)

[local] Disk Savvy Enterprise 12.3.18 – Unquoted Service Path

[local] Wedding Slideshow Studio 1.36 – 'Name' Buffer Overflow

[remote] OpenSMTPD 6.4.0 < 6.6.1 – Local Privilege Escalation + Remote Code Execution

[local] Wedding Slideshow Studio 1.36 – 'Key' Buffer Overflow

[webapps] Forcepoint WebSecurity 8.5 – Reflective Cross-Site Scripting

[webapps] LearnDash WordPress LMS Plugin 3.1.2 – Reflective Cross-Site Scripting

[local] Windscribe – WindscribeService Named Pipe Privilege Escalation (Metasploit)

[webapps] ExpertGPS 6.38 – XML External Entity Injection

[webapps] QuickDate 1.3.2 – SQL Injection