>> TAG: #0day

CloudMe 1.11.2 – Buffer Overflow ROP (DEP,ASLR)

Mida eFramework 2.8.9 – Remote Code Execution

MSI Ambient Link Driver 1.0.0.8 – Local Privilege Escalation

Joplin 1.0.245 – Arbitrary Code Execution (PoC)

BigTree CMS 4.4.10 – Remote Code Execution

Anchor CMS 0.12.7 – Persistent Cross-Site Scripting (Authenticated)

B-swiss 3 Digital Signage System 3.6.5 – Cross-Site Request Forgery (Add Maintenance Admin)

B-swiss 3 Digital Signage System 3.6.5 – Database Disclosure

Simple Online Food Ordering System 1.0 – ‘id’ SQL Injection (Unauthenticated)

Visitor Management System in PHP 1.0 – Persistent Cross-Site Scripting