Tag: 0day

[local] MSN Password Recovery 1.30 – XML External Entity Injection

[webapps] Codoforum 4.8.3 – 'input_txt' Persistent Cross-Site Scripting

[remote] Cisco DCNM JBoss 10.4 – Credential Leakage

[webapps] Online Book Store 1.0 – Unauthenticated Remote Code Execution

[remote] EBBISLAND EBBSHAVE 6100-09-04-1441 – Remote Buffer Overflow

[remote] ASTPP VoIP 4.0.1 – Remote Code Execution

[remote] JetBrains TeamCity 2018.2.4 – Remote Code Execution

[webapps] Tomcat proprietaryEvaluate 9.0.0.M1 – Sandbox Escape

[webapps] Job Portal 1.0 – Remote Code Execution

[local] AnyDesk 5.4.0 – Unquoted Service Path