Tag: 0day

[webapps] Zoho ManageEngine ServiceDesk Plus < 10.5 – Improper Access Restrictions

[dos] BlueStacks 4.80.0.1060 – Denial of Service (PoC)

[dos] TapinRadio 2.11.6 – 'Uername' Denial of Service (PoC)

[webapps] Horde Webmail 5.2.22 – Multiple Vulnerabilities

[local] Microsoft Windows (x84/x64) – 'Error Reporting' Discretionary Access Control List / Local Privilege Escalation

[local] Microsoft Windows (x84) – Task Scheduler' .job' Import Arbitrary Discretionary Access Control List Write / Local Privilege Escalation

[local] Microsoft Internet Explorer 11 – Sandbox Escape

[webapps] Moodle Jmol Filter 6.1 – Directory Traversal / Cross-Site Scripting

[webapps] WordPress Plugin WPGraphQL 0.2.3 – Multiple Vulnerabilities

[webapps] Oracle CTI Web Service – 'EBS_ASSET_HISTORY_OPERATIONS' XML Entity Injection