Tag: 0day

[local] xglance-bin 11.00 – Privilege Escalation

[webapps] Kronos WebTA 4.0 – Authenticated Remote Privilege Escalation

[webapps] Verodin Director Web Console 3.5.4.0 – Remote Authenticated Password Disclosure (PoC)

[remote] HiSilicon DVR/NVR hi3520d firmware – Remote Backdoor Account

[webapps] Centreon 19.10.5 – 'Pollers' Remote Command Execution (Metasploit)

[local] Sudo 1.8.25p – Buffer Overflow

[webapps] School ERP System 1.0 – Cross Site Request Forgery (Add Admin)

[webapps] IceWarp WebMail 11.4.4.1 – Reflective Cross-Site Scripting

[dos] BearFTP 0.1.0 – 'PASV' Denial of Service

[webapps] phpList 3.5.0 – Authentication Bypass