Tag: 0day

[webapps] Goanywhere Encryption helper 7.1.1 – Remote Code Execution (RCE)

[dos] FortiRecorder 6.4.3 – Denial of Service

[remote] Microsoft Excel 365 MSO (Version 2302 Build 16.0.16130.20186) 64-bit – Remote Code Execution (RCE)

[webapps] dotclear 2.25.3 – Remote Code Execution (RCE) (Authenticated)

[webapps] MAC 1200R – Directory Traversal

[remote] Tenda N300 F3 12.01.01.48 – Malformed HTTP Request Header Processing

[remote] IBM Aspera Faspex 4.4.1 – YAML deserialization (RCE)

[webapps] ChurchCRM 4.5.1 – Authenticated SQL Injection

[webapps] NotrinosERP 0.7 – Authenticated Blind SQL Injection

[remote] Schneider Electric v1.0 – Directory traversal & Broken Authentication