>> CATEGORY: exploit

MySQL version 5.6.24 suffers from multiple buffer overflow vulnerabilities.

RedHat Enterprise Linux version 7.1 suffers from a kernel crash vulnerability on invalid USB device descriptors.

ZTE ZXHN H108N suffers from an unauthenticated configuration download vulnerability.

LanWhoIs.exe version 1.0.1.120 suffers from a buffer overflow vulnerability.

Huawei 3G routers suffer from authentication bypass, cross site request forgery, denial of service, and various other vulnerabilities.

Netgear N300 routers suffer from an authentication bypass vulnerability that allows for complete compromise.

Zope Management Interface version 4.3.7 suffers from a cross site request forgery vulnerability.

TestLink version 1.9.13 suffers from a remote SQL injection vulnerability.

TestLink version 1.9.13 suffers from multiple cross site scripting vulnerabilities.

This proof of concept shows a crash that was observed in MS Office 2007 running under Windows 2003 x86. Microsoft Office File Validation Add-In is disabled and application verified was…