Tag: 0day

[webapps] Employee Record Management System 1.2 – Stored Cross-Site Scripting (XSS)

[webapps] Wyomind Help Desk 1.3.6 – Remote Code Execution (RCE)

[webapps] WordPress Plugin SP Project & Document Manager 4.21 – Remote Code Execution (RCE) (Authenticated)

[webapps] Rocket.Chat 3.12.1 – NoSQL Injection to RCE (Unauthenticated) (2)

[webapps] Online Covid Vaccination Scheduler System 1.0 – 'username' time-based blind SQL Injection

[webapps] WordPress Plugin Plainview Activity Monitor 20161228 – Remote Code Execution (RCE) (Authenticated) (2)

[webapps] Black Box Kvm Extender 3.4.31307 – Local File Inclusion

[webapps] Netgear DGN2200v1 – Remote Command Execution (RCE) (Unauthenticated)

[webapps] Billing System Project 1.0 – Remote Code Execution (RCE) (Unauthenticated)

[webapps] Pallets Werkzeug 0.15.4 – Path Traversal