Tag: 0day

[webapps] WordPress Plugin 3DPrint Lite 1.9.1.4 – Arbitrary File Upload

[webapps] Backdrop CMS 1.20.0 – 'Multiple' Cross-Site Request Forgery (CSRF)

[webapps] WordPress Plugin Advanced Order Export For WooCommerce 3.1.7 – Reflected Cross-Site Scripting (XSS)

[webapps] WordPress Plugin Fitness Calculators 1.9.5 – Cross-Site Request Forgery (CSRF)

[webapps] Police Crime Record Management Project 1.0 – Time Based SQLi

[webapps] Simple Attendance System 1.0 – Unauthenticated Blind SQLi

[webapps] Filerun 2021.03.26 – Remote Code Execution (RCE) (Authenticated)

[webapps] Budget and Expense Tracker System 1.0 – Remote Code Execution (RCE) (Unauthenticated)

[webapps] WebsiteBaker 2.13.0 – Remote Code Execution (RCE) (Authenticated)

[dos] Yenkee Hornet Gaming Mouse – 'GM312Fltr.sys' Denial-Of-Service (PoC)