>> TAG: #0day

Microhard Systems 3G/4G Cellular Ethernet and Serial Gateway – Restricted Shell Escape

Microsoft Enterprise Mode Site List Manager – XML External Entity Injection

Fortify Software Security Center (SSC) 17.x/18.1 – XML External Entity Injection

WAGO e!DISPLAY 7300T – Multiple Vulnerabilities

phpMyAdmin – Authenticated Remote Code Execution (Metasploit)

Apache CouchDB – Arbitrary Command Execution (Metasploit)

G DATA Total Security 25.4.0.3 – Activex Buffer Overflow

Manage Engine Exchange Reporter Plus – Unauthenticated RCE (Metasploit)

QNAP Qcenter Virtual Appliance – Multiple Vulnerabilities

Zeta Producer Desktop CMS 14.2.0 – Remote Code Execution / Local File Disclosure