Tag: 0day

[webapps] CMSimple 5.4 – Local file inclusion (LFI) to Remote code execution (RCE) (Authenticated)

[remote] GNU gdbserver 9.2 – Remote Command Execution (RCE)

[webapps] WordPress Plugin WP Guppy 1.1 – WP-JSON API Sensitive Information Disclosure

[local] Linux Kernel 5.1.x – 'PTRACE_TRACEME' pkexec Local Privilege Escalation (2)

[webapps] Webrun 3.6.0.42 – 'P_0' SQL Injection

[webapps] Bus Pass Management System 1.0 – 'Search' SQL injection

[webapps] FLEX 1085 Web 1.6.0 – HTML Injection

[dos] Pinkie 2.15 – TFTP Remote Buffer Overflow (PoC)

[dos] Modbus Slave 7.3.1 – Buffer Overflow (DoS)

[webapps] Aimeos Laravel ecommerce platform 2021.10 LTS – 'sort' SQL injection