[webapps] OpenEMR 5.0.1.7 – 'fileName' Path Traversal (Authenticated)
Posted by deepcore under Security (No Respond)
[webapps] Node.JS – 'node-serialize' Remote Code Execution (3)
Posted by deepcore under Security (No Respond)
[remote] Dlink DSL2750U – 'Reboot' Command Injection
Posted by deepcore under Security (No Respond)
[webapps] ICE Hrm 29.0.0.OS – 'xml upload' Stored Cross-Site Scripting (XSS)
Posted by deepcore under Security (No Respond)
[webapps] ICE Hrm 29.0.0.OS – 'Account Takeover' Cross-Site Request Forgery (CSRF)
Posted by deepcore under Security (No Respond)
[webapps] ICE Hrm 29.0.0.OS – 'Account Takeover' Cross-Site Scripting and Session Fixation
Posted by deepcore under Security (No Respond)
ICE Hrm 29.0.0.OS – ‘Account Takeover’ Cross-Site Scripting and Session Fixation
Tags: 0day, remote exploit[webapps] Online Shopping Portal 3.1 – Remote Code Execution (Unauthenticated)
Posted by deepcore under Security (No Respond)
[webapps] Zoho ManageEngine ServiceDesk Plus MSP 9.4 – User Enumeration
Posted by deepcore under Security (No Respond)
[local] VX Search 13.5.28 – 'Multiple' Unquoted Service Path
Posted by deepcore under Security (No Respond)
[local] Dup Scout 13.5.28 – 'Multiple' Unquoted Service Path
Posted by deepcore under Security (No Respond)