Tag: 0day

[webapps] DAMICMS 6.0.0 – Cross-Site Request Forgery (Add Admin)

[local] Enhanced Mitigation Experience Toolkit (EMET) – XML External Entity Injection

[dos] Core FTP LE 2.2 – Buffer Overflow (PoC)

[webapps] VMware NSX SD-WAN Edge < 3.1.0 – Command Injection

[remote] FTPShell client 6.70 (Enterprise edition) – Stack Buffer Overflow (Metasploit)

[remote] Nagios XI 5.2.6-5.4.12 – Chained Remote Code Execution (Metasploit)

[webapps] HongCMS 3.0.0 – SQL Injection

[webapps] hycus CMS 1.0.4 – Authentication Bypass

[webapps] BEESCMS 4.0 – Cross-Site Request Forgery (Add Admin)

[webapps] DIGISOL DG-HR3400 Wireless Router – Cross-Site Scripting