Tag: 0day

[remote] Franklin Fueling Systems TS-550 – Exploit and Default Password

[webapps] Rukovoditel 3.3.1 – Remote Code Execution (RCE)

[webapps] Snitz Forum v1.0 – Blind SQL Injection

[remote] Docker based datastores for IBM Instana 241-2 243-0 – No Authentication

[local] Wondershare Dr Fone 12.9.6 – Privilege Escalation

[remote] Osprey Pump Controller 1.0.1 – Cross-Site Request Forgery

[remote] Osprey Pump Controller 1.0.1 – (eventFileSelected) Command Injection

[remote] Osprey Pump Controller 1.0.1 – Unauthenticated Remote Code Execution Exploit

[webapps] Mitel MiCollab AWV 8.1.2.4 and 9.1.3 – Directory Traversal and LFI

[webapps] Agilebio Lab Collector Electronic Lab Notebook v4.234 – Remote Code Execution (RCE)