Tag: 0day

[webapps] Croogo 3.0.2 – 'Multiple' Stored Cross-Site Scripting (XSS)

[webapps] Croogo 3.0.2 – Unrestricted File Upload

[webapps] Arunna 1.0.0 – 'Multiple' Cross-Site Request Forgery (CSRF)

[remote] Oliver Library Server v5 – Arbitrary File Download

[remote] Apache Log4j2 2.14.1 – Information Disclosure

[local] Laravel Valet 2.0.3 – Local Privilege Escalation (macOS)

[remote] Apache Log4j 2 – Remote Code Execution (RCE)

[webapps] WordPress Plugin Typebot 1.4.3 – Stored Cross Site Scripting (XSS) (Authenticated)

[local] Microsoft Internet Explorer / ActiveX Control – Security Bypass

[remote] HD-Network Real-time Monitoring System 2.0 – Local File Inclusion (LFI)