>> TAG: #0day

SeedDMS versions < 5.1.11 – Remote Command Execution

SeedDMS < 5.1.11 – 'out.GroupMgr.php' Cross-Site Scripting

SeedDMS < 5.1.11 – 'out.UsrMgr.php' Cross-Site Scripting

Linux/x86_64 – Reverse(0.0.0.0:4444/TCP) Shell (/bin/sh) Shellcode

GSearch 1.0.1.0 – Denial of Service (PoC)

GrandNode 4.40 – Path Traversal / Arbitrary File Download

dotProject 2.1.9 – SQL Injection

Microsoft Windows – ‘CmpAddRemoveContainerToCLFSLog’ Arbitrary File/Directory Creation

Microsoft Windows Font Cache Service – Insecure Sections Privilege Escalation

Threat Hunting – Hunter or Hunted