Tag: 0day

[webapps] WebHMI 4.0 – Remote Code Execution (RCE) (Authenticated)

[webapps] OpenCATS 0.9.4 – Remote Code Execution (RCE)

[webapps] Chikitsa Patient Management System 2.0.2 – Remote Code Execution (RCE) (Authenticated)

[webapps] Chikitsa Patient Management System 2.0.2 – 'backup' Remote Code Execution (RCE) (Authenticated)

[webapps] Employees Daily Task Management System 1.0 – 'username' SQLi Authentication Bypass

[webapps] TestLink 1.19 – Arbitrary File Download (Unauthenticated)

[webapps] Student Management System 1.0 – SQLi Authentication Bypass

[webapps] WordPress Plugin Catch Themes Demo Import 1.6.1 – Remote Code Execution (RCE) (Authenticated)

[webapps] Grafana 8.3.0 – Directory Traversal and Arbitrary File Read

[local] HCL Lotus Notes V12 – Unquoted Service Path