>> TAG: #0day

Oracle Fatwire 6.3 – Multiple Vulnerabilities

Event Registration System with QR Code 1.0 – Authentication Bypass & RCE

Denver Smart Wifi Camera SHC-150 – ‘Telnet’ Remote Code Execution (RCE)

TripSpark VEO Transportation – Blind SQL Injection

Customer Relationship Management System (CRM) 1.0 – Sql Injection Authentication Bypass

PHP 7.3.15-3 – ‘PHP_SESSION_UPLOAD_PROGRESS’ Session Data Injection

Elasticsearch ECE 7.13.3 – Anonymous Database Dump

Leawo Prof. Media 11.0.0.1 – Denial of Service (DoS) (PoC)

NoteBurner 2.35 – Denial Of Service (DoS) (PoC)

XOS Shop 1.0.9 – ‘Multiple’ Arbitrary File Deletion (Authenticated)