Tag: 0day

[webapps] FS Care Clone – 'sitterService' SQL Injection

[webapps] FS Thumbtack Clone – 'ser' SQL Injection

[webapps] Mura CMS < 6.2 – Server-Side Request Forgery / XML External Entity Injection

[webapps] FS Realtor Clone – 'id' SQL Injection

[webapps] Kaltura < 13.1.0 – Remote Code Execution

[remote] Unitrends UEB 9 – bpserverd Authentication Bypass Remote Command Execution (Metasploit)

[remote] Unitrends UEB 9 – http api/storage Remote Root (Metasploit)

[remote] Polycom – Command Shell Authorization Bypass (Metasploit)

[webapps] FS Food Delivery Script – 'keywords' SQL Injection

[webapps] FS Car Rental Script – 'pickup_location' SQL Injection