>> TAG: #0day

Pluck CMS 4.7.16 – Remote Code Execution (RCE) (Authenticated)

Hikvision IP Camera – Backdoor

Tiny File Manager 2.4.6 – Remote Code Execution (RCE)

Apache APISIX 2.12.1 – Remote Code Execution (RCE)

Baixar GLPI Project 9.4.6 – SQLi

VIVE Runtime Service – ‘ViveAgentService’ Unquoted Service Path

Seowon SLR-120 Router – Remote Code Execution (Unauthenticated)

Tdarr 2.00.15 – Command Injection

BattlEye 0.9 – ‘BEService’ Unquoted Service Path

Zabbix 5.0.17 – Remote Code Execution (RCE) (Authenticated)