Tag: 0day

[webapps] MyBB Threads to Link Plugin 1.3 – Cross-Site Scripting

[webapps] GitList 0.6 – Unauthenticated Remote Code Execution

[webapps] SickRage < v2018.03.09 – Clear-Text Credentials HTTP Response

[webapps] Jfrog Artifactory < 4.16 – Unauthenticated Arbitrary File Upload / Remote Command Execution

[webapps] Frog CMS 0.9.5 – Persistent Cross-Site Scripting

[webapps] HRSALE The Ultimate HRM 1.0.2 – Authenticated Cross-Site Scripting

[dos] Chrome V8 JIT – 'AwaitedPromise' Update Bug

[webapps] HRSALE The Ultimate HRM v1.0.2 – Local File Inclusion

[webapps] HRSALE The Ultimate HRM v1.0.2 – 'award_id' SQL Injection

[webapps] HRSALE The Ultimate HRM v1.0.2 – CSV Injection