[webapps] ENTAB ERP 1.0 – Username PII leak
Posted by deepcore under Security (No Respond)
[local] Lucee Scheduled Job v1.0 – Command Execution
Posted by deepcore under Security (No Respond)
[webapps] X2CRM v6.6/6.9 – Reflected Cross-Site Scripting (XSS) (Authenticated)
Posted by deepcore under Security (No Respond)
[webapps] X2CRM v6.6/6.9 – Stored Cross-Site Scripting (XSS) (Authenticated)
Posted by deepcore under Security (No Respond)
[dos] Microsoft Windows 11 – 'cmd.exe' Denial of Service
Posted by deepcore under Security (No Respond)
[webapps] ZCBS/ZBBS/ZPBS v4.14k – Reflected Cross-Site Scripting (XSS)
Posted by deepcore under Security (No Respond)
[webapps] WebsiteBaker v2.13.3 – Cross-Site Scripting (XSS)
Posted by deepcore under Security (No Respond)
[webapps] Pentaho BA Server EE 9.3.0.0-428 – Remote Code Execution (RCE) (Unauthenticated)
Posted by deepcore under Security (No Respond)
Pentaho BA Server EE 9.3.0.0-428 – Remote Code Execution (RCE) (Unauthenticated)
Tags: 0day, remote exploit[local] ESET Service 16.0.26.0 – 'Service ekrn' Unquoted Service Path
Posted by deepcore under Security (No Respond)
[webapps] Online Appointment System V1.0 – Cross-Site Scripting (XSS)
Posted by deepcore under Security (No Respond)