>> TAG: #0day

CuteEditor for PHP 6.6 – Directory Traversal

mPDF 7.0 – Local File Inclusion

Omnia MPX 1.5.0+r1 – Path Traversal

NanoCMS v0.4 – Remote Code Execution (RCE) (Authenticated)

Webmin 1.996 – Remote Code Execution (RCE) (Authenticated)

WordPress Plugin Duplicator 1.4.6 – Unauthenticated Backup Download

Wavlink WN530HG4 – Password Disclosure

Easy Chat Server 3.1 – Remote Stack Buffer Overflow (SEH)

Wavlink WN533A8 – Cross-Site Scripting (XSS)

Wavlink WN533A8 – Password Disclosure