>> TAG: #0day

Tiny Tiny RSS – Remote Code Execution

Zen Cart 1.5.7b – Remote Code Execution (Authenticated)

WiFi Mouse 1.7.8.5 – Remote Code Execution

FortiLogger 4.4.2.2 – Unauthenticated Arbitrary File Upload (Metasploit)

VMware vCenter Server 7.0 – Unauthenticated File Upload

Simple Employee Records System 1.0 – File Upload RCE (Unauthenticated)

Triconsole 3.75 – Reflected XSS

ASUS Remote Link 1.1.2.13 – Remote Code Execution

SpotAuditor 5.3.5 – ‘multiple’ Denial Of Service (PoC)

python jsonpickle 2.0.0 – Remote Code Execution