>> TAG: #0day

Find a Place CMS Directory 1.5 – ‘assets/external/data_2.php cate’ SQL Injection

Zuz Music 2.1 – ‘zuzconsole/___contact ‘ Persistent Cross-Site Scripting

Valentina Studio 9.0.4 – ‘Host’ Denial of Service (PoC)

BulletProof FTP Server 2019.0.0.50 – ‘SMTP Server’ Denial of Service (PoC)

eDirectory – SQL Injection

qdPM 9.1 – ‘search[keywords]’ Cross-Site Scripting

MISP 2.4.97 – SQL Command Execution via Command Injection in STIX Module

Master IP CAM 01 3.3.4.2103 – Remote Command Execution

NBMonitor 1.6.5.0 – ‘Key’ Denial of Service (PoC)

CMSsite 1.0 – ‘post’ SQL Injection