Tag: 0day

[webapps] Open-AuditIT Professional 2.1 – Cross-Site Request Forgery

[webapps] WordPress Plugin WP Security Audit Log 3.1.1 – Sensitive Information Disclosure

[webapps] Joomla Component Fields – SQLi Remote Code Execution (Metasploit)

[remote] Exodus Wallet (ElectronJS Framework) – Remote Code Execution (Metasploit)

[remote] GitStack – Unsanitized Argument Remote Code Execution (Metasploit)

[webapps] TwonkyMedia Server 7.0.11-8.5 – Persistent Cross-Site Scripting

[webapps] Tenda N11 Wireless Router 5.07.43_en_NEX01 – Remote DNS Change

[webapps] Microsoft Windows Remote Assistance – XML External Entity Injection

[webapps] TwonkyMedia Server 7.0.11-8.5 – Directory Traversal

[webapps] Open-AuditIT Professional 2.1 – Cross-Site Scripting