Tag: 0day

[webapps] part-db 0.5.11 – Remote Code Execution (RCE)

[webapps] Spring Cloud Gateway 3.1.0 – Remote Code Execution (RCE)

[webapps] Attendance and Payroll System v1.0 – SQLi Authentication Bypass

[webapps] Attendance and Payroll System v1.0 – Remote Code Execution (RCE)

[webapps] Hasura GraphQL 2.2.0 – Information Disclosure

[local] Private Internet Access 3.3 – 'pia-service' Unquoted Service Path

[local] Cloudflare WARP 1.4 – Unquoted Service Path

[local] Foxit PDF Reader 11.0 – Unquoted Service Path

[webapps] Xerte 3.10.3 – Directory Traversal (Authenticated)

[webapps] Xerte 3.9 – Remote Code Execution (RCE) (Authenticated)