>> TAG: #0day

part-db 0.5.11 – Remote Code Execution (RCE)

Spring Cloud Gateway 3.1.0 – Remote Code Execution (RCE)

Attendance and Payroll System v1.0 – SQLi Authentication Bypass

Attendance and Payroll System v1.0 – Remote Code Execution (RCE)

Hasura GraphQL 2.2.0 – Information Disclosure

Private Internet Access 3.3 – ‘pia-service’ Unquoted Service Path

Cloudflare WARP 1.4 – Unquoted Service Path

Foxit PDF Reader 11.0 – Unquoted Service Path

Xerte 3.10.3 – Directory Traversal (Authenticated)

Xerte 3.9 – Remote Code Execution (RCE) (Authenticated)