Tag: 0day

[webapps] Strapi CMS 3.0.0-beta.17.4 – Remote Code Execution (RCE) (Unauthenticated)

[webapps] Bus Pass Management System 1.0 – 'viewid' SQL Injection

[webapps] Usermin 1.820 – Remote Code Execution (RCE) (Authenticated)

[local] MySQL User-Defined (Linux) x32 / x86_64 – 'sys_exec' Local Privilege Escalation (2)

[webapps] Strapi 3.0.0-beta – Set Password (Unauthenticated)

[webapps] Strapi 3.0.0-beta.17.7 – Remote Code Execution (RCE) (Authenticated)

[webapps] Projectsend r1295 – 'name' Stored XSS

[webapps] CyberPanel 2.1 – Remote Code Execution (RCE) (Authenticated)

[webapps] ProcessMaker 3.5.4 – Local File inclusion

[webapps] WordPress Plugin Mail Masta 1.0 – Local File Inclusion (2)