>> CATEGORY: Security

OctoberCMS 1.0.425 (Build 425) – Cross-Site Scripting

E-Sic Software livre CMS – ‘cpfcnpj’ Parameter SQL Injection

Trend Micro OfficeScan 11.0/XG (12.0) – Remote Code Execution (Metasploit)

Trend Micro InterScan Messaging Security (Virtual Appliance) – Remote Code Execution (Metasploit)

ASX to MP3 3.1.3.7 – ‘.m3u’ Buffer Overflow

Complain Management System – Hard-Coded Credentials / Blind SQL injection

Rancher Server – Docker Daemon Code Execution (Metasploit)

OrientDB 2.2.2 – 2.2.22 – Remote Code Execution (Metasploit)

QNAP HelpDesk < 1.1.12 – SQL Injection

PyroBatchFTP 3.17 – Buffer Overflow (SEH)