>> TAG: #0day

OpenMRS – Java Deserialization RCE (Metasploit)

Telerik UI – Remote Code Execution via Insecure Deserialization

Zendesk App SweetHawk Survey 1.6 – Persistent Cross-Site Scripting

Netgear R6400 – Remote Code Execution

NopCommerce 4.2.0 – Privilege Escalation

D-Link DIR-615 – Privilege Escalation

Linux 5.3 – Privilege Escalation via io_uring Offload of sendmsg() onto Kernel Thread with Kernel Creds

D-Link DIR-615 Wireless Router  –  Persistent Cross-Site Scripting

Roxy Fileman 1.4.5 – Directory Traversal

NVMS 1000 – Directory Traversal