Tag: 0day

[local] 10-Strike Network Inventory Explorer Pro 9.31 – 'srvInventoryWebServer' Unquoted Service Path

[webapps] Payment Terminal 3.1 – 'Multiple' Cross-Site Scripting (XSS)

[webapps] Opencart 3 Extension TMD Vendor System – Blind SQL Injection

[webapps] Opencart 3 Extension TMD Vendor System – Blind SQL Injection

[webapps] PHPJabbers Simple CMS 5 – 'name' Persistent Cross-Site Scripting (XSS)

[webapps] WordPress Plugin Hotel Listing 3 – 'Multiple' Cross-Site Scripting (XSS)

[webapps] Fuel CMS 1.4.1 – Remote Code Execution (3)

[webapps] Simplephpscripts Simple CMS 2.1 – 'Multiple' Stored Cross-Site Scripting (XSS)

[webapps] Simplephpscripts Simple CMS 2.1 – 'Multiple' SQL Injection

[local] RDP Manager 4.9.9.3 – Denial-of-Service (PoC)