>> TAG: #0day

PHP Timeclock 1.04 – ‘Multiple’ Cross Site Scripting (XSS)

Microweber CMS 1.1.20 – Remote Code Execution (Authenticated)

Sandboxie Plus 0.7.4 – ‘SbieSvc’ Unquoted Service Path

Epic Games Easy Anti-Cheat 4.0 – Local Privilege Escalation

Voting System 1.0 – Authentication Bypass (SQLI)

Sandboxie 5.49.7 – Denial of Service (PoC)

WifiHotSpot 1.0.0.0 – ‘WifiHotSpotService.exe’ Unquoted Service Path

Schlix CMS 2.2.6-6 – ‘title’ Persistent Cross-Site Scripting (Authenticated)

Schlix CMS 2.2.6-6 – Remote Code Execution (Authenticated)

WordPress Plugin WP Super Edit 2.5.4 – Remote File Upload