Tag: 0day

[webapps] Advantech WebAccess < 8.3 – Directory Traversal / Remote Code Execution

[webapps] Prisma Industriale Checkweigher PrismaWEB 1.21 – Hard-Coded Credentials

[remote] DEWESoft X3 SP1 (64-bit) – Remote Command Execution

[webapps] ManageEngine Applications Manager 13.5 – Remote Code Execution (Metasploit)

[local] SC 7.16 – Stack-Based Buffer Overflow

[remote] MikroTik RouterOS < 6.38.4 (MIPSBE) – 'Chimay Red' Stack Clash Remote Code Execution

[dos] WebLog Expert Enterprise 9.4 – Denial of Service

[local] WebLog Expert Enterprise 9.4 – Authentication Bypass

[webapps] Bacula-Web < 8.0.0-rc2 – SQL Injection

[dos] Memcached 1.5.5 – 'Memcrashed ' Insufficient Control of Network Message Volume Denial of Service With Shodan API