Tag: 0day

[remote] Unified Remote 3.13.0 – Remote Code Execution (RCE)

[local] HospitalRun 1.0.0-beta – Local Root Exploit for macOS

[remote] WIMAX SWC-5100W Firmware V(1.11.0.1 :1.9.9.4) – Authenticated RCE

[webapps] Purchase Order Management-1.0 – Local File Inclusion

[webapps] craftercms 4.x.x – CORS

[webapps] pfBlockerNG 2.1.4_26 – Remote Code Execution (RCE)

[webapps] Open Web Analytics 1.7.3 – Remote Code Execution (RCE)

[webapps] CVAT 2.0 – SSRF (Server Side Request Forgery)

[remote] MSNSwitch Firmware MNT.2408 – Remote Code Exectuion (RCE)

[remote] AVEVA InTouch Access Anywhere Secure Gateway 2020 R2 – Path Traversal