>> TAG: #0day

Bludit 3.9.12 – Directory Traversal

Virtual Airlines Manager 2.6.2 – ‘airport’ SQL Injection

Kyocera Printer d-COPIA253MF – Directory Traversal (PoC)

Virtual Airlines Manager 2.6.2 – ‘notam’ SQL Injection

Frigate 3.36.0.9 – ‘Command Line’ Local Buffer Overflow (SEH) (PoC)

Online Course Registration 1.0 – Authentication Bypass

Online-Exam-System 2015 – ‘feedback’ SQL Injection

AirControl 1.4.2 – PreAuth Remote Code Execution

Hostel Management System 2.0 – ‘id’ SQL Injection (Unauthenticated)

Clinic Management System 1.0 – Unauthenticated Remote Code Execution