>> TAG: #0day

WordPress Plugin Form Maker 5.4.1 – ‘s’ SQL Injection (Authenticated)

Plesk/myLittleAdmin – ViewState .NET Deserialization (Metasploit)

GoldWave – Buffer Overflow (SEH Unicode)

Online Discussion Forum Site 1.0 – Remote Code Execution

VUPlayer 2.49 .m3u – Local Buffer Overflow (DEP,ASLR)

Konica Minolta FTP Utility 1.0 – ‘LIST’ Denial of Service (PoC)

Filetto 1.0 – ‘FEAT’ Denial of Service (PoC)

Konica Minolta FTP Utility 1.0 – ‘NLST’ Denial of Service (PoC)

Dolibarr 11.0.3 – Persistent Cross-Site Scripting

Druva inSync Windows Client 6.6.3 – Local Privilege Escalation