>> TAG: #0day

Moodle 3.4.1 – Remote Code Execution

FTPGetter Standard 5.97.0.177 – Remote Code Execution

Apache UNO / LibreOffice Version: 6.1.2 / OpenOffice 4.1.6 API – Remote Code Execution

Intel Modular Server System 10.18 – Cross-Site Request Forgery (Change Admin Password)

Pegasus CMS 1.0 – ‘extra_fields.php’ Plugin Remote Code Execution

Core FTP Server FTP / SFTP Server v2 Build 674 – ‘SIZE’ Directory Traversal

Microsoft Windows – .reg File / Dialog Box Message Spoofing

Core FTP Server FTP / SFTP Server v2 Build 674 – ‘MDTM’ Directory Traversal

WordPress Plugin GraceMedia Media Player 1.0 – Local File Inclusion

PilusCart 1.4.1 – Cross-Site Request Forgery (Add Admin)