Tag: 0day

[webapps] Servisnet Tessa – Add sysAdmin User (Unauthenticated) (Metasploit)

[local] Mozilla Firefox 67 – Array.pop JIT Type Confusion

[local] CONTPAQi(R) AdminPAQ 14.0.0 – Unquoted Service Path

[webapps] WordPress Plugin Domain Check 1.0.16 – Reflected Cross-Site Scripting (XSS) (Authenticated)

[webapps] WordPress Plugin 404 to 301 2.0.2 – SQL-Injection (Authenticated)

[webapps] Moodle 3.11.4 – SQL Injection

[webapps] WordPress Plugin Mortgage Calculators WP 1.52 – Stored Cross-Site Scripting (XSS) (Authenticated)

[webapps] WordPress Plugin RegistrationMagic V 5.0.1.5 – SQL Injection (Authenticated)

[webapps] WordPress Plugin Modern Events Calendar V 6.1 – SQL Injection (Unauthenticated)

[remote] Oracle WebLogic Server 14.1.1.0.0 – Local File Inclusion