>> TAG: #0day

WebHMI 4.0 – Remote Code Execution (RCE) (Authenticated)

OpenCATS 0.9.4 – Remote Code Execution (RCE)

Chikitsa Patient Management System 2.0.2 – Remote Code Execution (RCE) (Authenticated)

Chikitsa Patient Management System 2.0.2 – ‘backup’ Remote Code Execution (RCE) (Authenticated)

Employees Daily Task Management System 1.0 – ‘username’ SQLi Authentication Bypass

TestLink 1.19 – Arbitrary File Download (Unauthenticated)

Student Management System 1.0 – SQLi Authentication Bypass

WordPress Plugin Catch Themes Demo Import 1.6.1 – Remote Code Execution (RCE) (Authenticated)

Grafana 8.3.0 – Directory Traversal and Arbitrary File Read

HCL Lotus Notes V12 – Unquoted Service Path