Dabman and Imperial Web Radio Devices suffers from undocumented telnet backdoor and command execution vulnerabilities.
WordPress Qwiz Online Quizzes and Flashcards plugin version 3.36 suffers from a cross site scripting vulnerability.
Cisco Content Security Virtual Appliance M380 IronPort remote cross site host modification demo exploit.
Tibco JasperSoft suffers from a path traversal vulnerability.
Core FTP LE version 2.2 build 1935 suffers from buffer overflow vulnerability.
The Rifatron Intelligent Digital Security System DVR suffers from an unauthenticated and unauthorized live stream disclosure when animate.cgi script is called through Mobile Web Viewer module.
Windows 10 – UAC Protection Bypass Via Windows Store (WSReset.exe) and Registry (Metasploit)
Tags: 0day, remote exploit