Tag: 0day

[webapps] ira 8.3.4 – Information Disclosure (Username Enumeration)

[webapps] Schneider Electric U.Motion Builder 1.3.4 – Authenticated Command Injection

[dos] P2PWIFICAM2 for iOS 10.4.1 – 'Camera ID' Denial of Service (PoC)

[webapps] Lotus Core CMS 1.0.1 – Local File Inclusion

[remote] OpenSMTPD 6.6.2 – Remote Code Execution

[webapps] rConfig 3.9.3 – Authenticated Remote Code Execution

[webapps] Kibana 6.6.1 – CSV Injection

[webapps] Liferay CE Portal 6.0.2 – Remote Command Execution

[local] XMLBlueprint 16.191112 – XML External Entity Injection

[webapps] Cups Easy 1.0 – Cross Site Request Forgery (Password Reset)