Tag: 0day

[webapps] LayerBB 1.1.2 – Cross-Site Request Forgery (Add Admin)

[local] exacqVision ESM 5.12.2 – Privilege Escalation

[webapps] DomainMOD 4.11.01 – 'ssl-accounts.php username' Cross-Site Scripting

[webapps] DomainMOD 4.11.01 – 'ssl-provider-name' Cross-Site Scripting

[webapps] DomainMOD 4.11.01 – 'assets/add/dns.php' Cross-Site Scripting

[webapps] DomainMOD 4.11.01 – 'category.php CatagoryName, StakeHolder' Cross-Site Scripting

[webapps] DomainMOD 4.11.01 – 'assets/edit/host.php?whid=5' Cross-Site Scripting

[webapps] WordPress Plugin Booking Calendar 8.4.3 – Authenticated SQL Injection

[dos] MediaMonkey 4.1.23 – '.mp3' URL Denial of Service (PoC)

[dos] ApowerManager 3.1.7 – Phone Manager Remote Denial of Service (DoS)