>> TAG: #0day

Unified Remote 3.13.0 – Remote Code Execution (RCE)

HospitalRun 1.0.0-beta – Local Root Exploit for macOS

WIMAX SWC-5100W Firmware V(1.11.0.1 :1.9.9.4) – Authenticated RCE

Purchase Order Management-1.0 – Local File Inclusion

craftercms 4.x.x – CORS

pfBlockerNG 2.1.4_26 – Remote Code Execution (RCE)

Open Web Analytics 1.7.3 – Remote Code Execution (RCE)

CVAT 2.0 – SSRF (Server Side Request Forgery)

MSNSwitch Firmware MNT.2408 – Remote Code Exectuion (RCE)

AVEVA InTouch Access Anywhere Secure Gateway 2020 R2 – Path Traversal