Tag: 0day

[webapps] Oracle Hospitality Simphony (MICROS) 2.7 < 2.9 – Directory Traversal

[webapps] Joomla! Component Jimtawl 2.1.6 – Arbitrary File Upload

[webapps] Joomla! Component JMS Music 1.1.1 – SQL Injection

[shellcode] Linux/x64 – Twofish Encoded + DNS (CNAME) Password + execve(/bin/sh) Shellcode

[webapps] Joomla! Component JEXTN Reverse Auction 3.1.0 – SQL Injection

[webapps] Joomla! Component JE PayperVideo 3.0.0 – 'usr_plan' SQL Injection

[webapps] IPSwitch MOVEit 8.1 < 9.4 – Cross-Site Scripting

[local] Microsoft Windows Subsystem for Linux – Local Privilege Escalation

[webapps] Advance Loan Management System – 'id' SQL Injection

[webapps] Fancy Clone Script – 'search_browse_product' SQL Injection