Tag: 0day

[webapps] Webtareas 2.0 – 'id' SQL Injection

[webapps] OLK Web Store 2020 – Cross-Site Request Forgery

[webapps] Genexis Platinum-4410 2.1 – Authentication Bypass

[dos] BOOTP Turbo 2.0 – Denial of Service (SEH)(PoC)

[webapps] qdPM 9.1 – Remote Code Execution

[remote] Pachev FTP Server 1.0 – Path Traversal

[webapps] Citrix XenMobile Server 10.8 – XML External Entity Injection

[dos] KeePass 2.44 – Denial of Service (PoC)

[webapps] ManageEngine Network Configuration Manager 12.2 – 'apiKey' SQL Injection

[local] NEOWISE CARBONFTP 1.4 – Weak Password Encryption