>> TAG: #0day

WordPress Plugin 3dady real-time web stats 1.0 – Stored Cross Site Scripting (XSS)

Aero CMS v0.0.1 – SQLi

Testa 3.5.1 Online Test Management System – Reflected Cross-Site Scripting (XSS)

WiFiMouse 1.8.3.4 – Remote Code Execution (RCE)

Wifi HD Wireless Disk Drive 11 – Local File Inclusion

Mobile Mouse 3.6.0.4 – Remote Code Execution (RCE)

Bookwyrm v0.4.3 – Authentication Bypass

Airspan AirSpot 5410 version 0.3.4.1 – Remote Code Execution (RCE)

Buffalo TeraStation Network Attached Storage (NAS) 1.66 – Authentication Bypass

Blink1Control2 2.2.7 – Weak Password Encryption