Tag: 0day

[remote] Prowise Reflect v1.0.9 – Remote Keystroke Injection

[webapps] Zyxel ZyWALL 2 Plus Internet Security Appliance – Cross-Site Scripting (XSS)

[remote] Printix Client 1.3.1106.0 – Remote Code Execution (RCE)

[webapps] Casdoor 1.13.0 – SQL Injection (Unauthenticated)

[webapps] Cipi Control Panel 3.1.15 – Stored Cross-Site Scripting (XSS) (Authenticated)

[local] Cobian Reflector 0.9.93 RC1 – 'Password' Denial of Service (PoC)

[local] Cobian Backup 11 Gravity 11.2.0.582 – 'Password' Denial of Service (PoC)

[local] Cobian Backup Gravity 11.2.0.582 – 'CobianBackup11' Unquoted Service Path

[remote] WAGO 750-8212 PFC200 G2 2ETH RS – Privilege Escalation

[local] Wondershare MirrorGo 2.0.11.346 – Insecure File Permissions