Tag: 0day

[webapps] Nimble Streamer 3.0.2-2 < 3.5.4-9 – Directory Traversal

[webapps] Pulse Secure 8.1R15.1/8.2/8.3/9.0 SSL VPN – Arbitrary File Disclosure (metasploit)

[webapps] WordPress Add Mime Types Plugin 2.2.1 – Cross-Site Request Forgery

[webapps] Kimai 2 – Persistent Cross-Site Scripting

[webapps] FortiOS 5.6.3 – 5.6.7 / FortiOS 6.0.0 – 6.0.4 – Credentials Disclosure (Metasploit)

[webapps] FortiOS 5.6.3 – 5.6.7 / FortiOS 6.0.0 – 6.0.4 – Credentials Disclosure

[webapps] Neo Billing 3.5 – Persistent Cross-Site Scripting

[dos] RAR Password Recovery 1.80 – 'User Name and Registration Code' Denial of Service

[webapps] Webmin 1.920 – Remote Code Execution

[webapps] YouPHPTube 7.2 – 'userCreate.json.php' SQL Injection