>> TAG: #0day

Webtareas 2.0 – ‘id’ SQL Injection

OLK Web Store 2020 – Cross-Site Request Forgery

Genexis Platinum-4410 2.1 – Authentication Bypass

BOOTP Turbo 2.0 – Denial of Service (SEH)(PoC)

qdPM 9.1 – Remote Code Execution

Pachev FTP Server 1.0 – Path Traversal

Citrix XenMobile Server 10.8 – XML External Entity Injection

KeePass 2.44 – Denial of Service (PoC)

ManageEngine Network Configuration Manager 12.2 – ‘apiKey’ SQL Injection

NEOWISE CARBONFTP 1.4 – Weak Password Encryption