Tag: 0day

[remote] OpenMRS – Java Deserialization RCE (Metasploit)

[webapps] Telerik UI – Remote Code Execution via Insecure Deserialization

[webapps] Zendesk App SweetHawk Survey 1.6 – Persistent Cross-Site Scripting

[webapps] Netgear R6400 – Remote Code Execution

[webapps] NopCommerce 4.2.0 – Privilege Escalation

[webapps] D-Link DIR-615 – Privilege Escalation

[local] Linux 5.3 – Privilege Escalation via io_uring Offload of sendmsg() onto Kernel Thread with Kernel Creds

[webapps] D-Link DIR-615 Wireless Router  –  Persistent Cross-Site Scripting

[webapps] Roxy Fileman 1.4.5 – Directory Traversal

[webapps] NVMS 1000 – Directory Traversal