Tag: 0day

[webapps] KodExplorer 4.49 – CSRF to Arbitrary File Upload

[remote] Microsoft Word 16.72.23040900 – Remote Code Execution (RCE)

[webapps] Bang Resto v1.0 – 'Multiple' SQL Injection

[webapps] Bang Resto v1.0 – Stored Cross-Site Scripting (XSS)

[local] AspEmail v5.6.0.2 – Local Privilege Escalation

[webapps] Swagger UI 4.1.3 – User Interface (UI) Misrepresentation of Critical Information

[remote] Franklin Fueling Systems TS-550 – Default Password

[webapps] GDidees CMS 3.9.1 – Local File Disclosure

[webapps] Chitor-CMS v1.1.2 – Pre-Auth SQL Injection

[local] Linux Kernel 6.2 – Userspace Processes To Enable Mitigation