>> TAG: #0day

FatPipe Networks WARP/IPVPN/MPVPN 10.2.2 – Config Download (Unauthenticated)

FatPipe Networks WARP 10.2.2 – Authorization Bypass

FatPipe Networks WARP/IPVPN/MPVPN 10.2.2 – Remote Privilege Escalation

FatPipe Networks WARP/IPVPN/MPVPN 10.2.2 – Hidden Backdoor Account (Write Access)

WordPress Plugin TranslatePress 2.0.8 – Stored Cross-Site Scripting (XSS) (Authenticated)

WordPress Plugin Contact Form 1.7.14 – Reflected Cross-Site Scripting (XSS)

WordPress Plugin Ultimate Maps 1.2.4 – Reflected Cross-Site Scripting (XSS)

FatPipe Networks WARP/IPVPN/MPVPN 10.2.2 – ‘Add Admin’ Cross-Site Request Forgery (CSRF)

WordPress Plugin Popup 1.10.4 – Reflected Cross-Site Scripting (XSS)

Apache James Server 2.3.2 – Remote Command Execution (RCE) (Authenticated) (2)