Tag: 0day

[webapps] Ultimate POS 4.4 – 'name' Cross-Site Scripting (XSS)

[webapps] PHPJabbers Simple CMS 5 – 'name' Persistent Cross-Site Scripting (XSS)

[webapps] WordPress Plugin Popup Anything 2.0.3 – 'Multiple' Stored Cross-Site Scripting (XSS)

[webapps] WordPress Plugin Hotel Listing 3 – 'Multiple' Cross-Site Scripting (XSS)

[webapps] Fuel CMS 1.4.1 – Remote Code Execution (3)

[webapps] Eclipse Jetty 11.0.5 – Sensitive File Disclosure

[webapps] Employee Record Management System 1.2 – 'empid' SQL injection (Unauthenticated)

[local] Dynojet Power Core 2.3.0 – Unquoted Service Path

[webapps] Ericsson Network Location MPS GMPC21 – Privilege Escalation (Metasploit)

[webapps] Ericsson Network Location MPS GMPC21 – Remote Code Execution (RCE) (Metasploit)