[webapps] WordPress Plugin TablePress 1.14 – CSV Injection
Posted by deepcore under Security (No Respond)
[webapps] WordPress Plugin WP Sitemap Page 1.6.4 – Stored Cross-Site Scripting (XSS)
Posted by deepcore under Security (No Respond)
WordPress Plugin WP Sitemap Page 1.6.4 – Stored Cross-Site Scripting (XSS)
Tags: 0day, remote exploit[local] Argus Surveillance DVR 4.0 – Unquoted Service Path
Posted by deepcore under Security (No Respond)
[webapps] OpenEMR 6.0.0 – 'noteid' Insecure Direct Object Reference (IDOR)
Posted by deepcore under Security (No Respond)
[webapps] FlatCore CMS 2.0.7 – Remote Code Execution (RCE) (Authenticated)
Posted by deepcore under Security (No Respond)
[webapps] Bus Pass Management System 1.0 – 'viewid' Insecure direct object references (IDOR)
Posted by deepcore under Security (No Respond)
Bus Pass Management System 1.0 – ‘viewid’ Insecure direct object references (IDOR)
Tags: 0day, remote exploit[webapps] Patient Appointment Scheduler System 1.0 – Unauthenticated File Upload & Remote Code Execution (RCE)
Posted by deepcore under Security (No Respond)
Patient Appointment Scheduler System 1.0 – Unauthenticated File Upload & Remote Code Execution (RCE)
Tags: 0day, remote exploit[webapps] Patient Appointment Scheduler System 1.0 – Persistent/Stored XSS
Posted by deepcore under Security (No Respond)
[dos] SmartFTP Client 10.0.2909.0 – 'Multiple' Denial of Service
Posted by deepcore under Security (No Respond)
[webapps] Antminer Monitor 0.5.0 – Authentication Bypass
Posted by deepcore under Security (No Respond)