Tag: 0day

[local] IOTransfer V4 – Unquoted Service Path

[remote] SmartRG Router SR510n 2.6.13 – RCE (Remote Code Execution)

[webapps] WordPress Plugin ImageMagick-Engine 1.7.4 – Remote Code Execution (RCE) (Authenticated)

[webapps] WordPress Plugin Zephyr Project Manager 3.2.42 – Multiple SQLi

[webapps] Feehi CMS 2.1.1 – Remote Code Execution (RCE) (Authenticated)

[webapps] TP-Link Tapo c200 1.1.15 – Remote Code Execution (RCE)

[remote] Teleport v10.1.1 – Remote Code Execution (RCE)

[webapps] WordPress Plugin WP-UserOnline 2.88.0 – Stored Cross Site Scripting (XSS)

[webapps] WordPress Plugin 3dady real-time web stats 1.0 – Stored Cross Site Scripting (XSS)