>> TAG: #0day

Prowise Reflect v1.0.9 – Remote Keystroke Injection

Zyxel ZyWALL 2 Plus Internet Security Appliance – Cross-Site Scripting (XSS)

Printix Client 1.3.1106.0 – Remote Code Execution (RCE)

Casdoor 1.13.0 – SQL Injection (Unauthenticated)

Cipi Control Panel 3.1.15 – Stored Cross-Site Scripting (XSS) (Authenticated)

Cobian Reflector 0.9.93 RC1 – ‘Password’ Denial of Service (PoC)

Cobian Backup 11 Gravity 11.2.0.582 – ‘Password’ Denial of Service (PoC)

Cobian Backup Gravity 11.2.0.582 – ‘CobianBackup11’ Unquoted Service Path

WAGO 750-8212 PFC200 G2 2ETH RS – Privilege Escalation

Wondershare MirrorGo 2.0.11.346 – Insecure File Permissions