>> TAG: #0day

Orchard Core RC1 – Persistent Cross-Site Scripting

qdPM 9.1 – Arbitrary File Upload

ChopSlider3 WordPress Plugin3.4 – ‘id’ SQL Injection

CuteNews 2.1.2 – Authenticated Arbitrary File Upload

Cisco Digital Network Architecture Center 1.3.1.4 – Persistent Cross-Site Scripting

LanSend 3.2 – Buffer Overflow (SEH)

MacOS 320.whatis Script – Privilege Escalation

Kartris 1.6 – Arbitrary File Upload

CuteNews 2.1.2 – Arbitrary File Deletion

Sentrifugo CMS 3.2 – Persistent Cross-Site Scripting