>> TAG: #0day

Hotel Druid 3.0.3 – Remote Code Execution (RCE)

Connectify Hotspot 2018 ‘ConnectifyService’ – Unquoted Service Path

File Sanitizer for HP ProtectTools 5.0.1.3 – ‘HPFSService’ Unquoted Service Path

WordPress Plugin MasterStudy LMS 2.7.5 – Unauthenticated Admin Account Creation

WordPress Plugin dzs-zoomsounds 6.60 – Remote Code Execution (RCE) (Unauthenticated)

Emerson PAC Machine Edition 9.80 Build 8695 – ‘TrapiServer’ Unquoted Service Path

Multi-Vendor Online Groceries Management System 1.0 – ‘id’ Blind SQL Injection

ServiceNow – Username Enumeration

Simple Student Quarterly Result/Grade System 1.0 – SQLi Authentication Bypass

H3C SSL VPN – Username Enumeration