>> TAG: #0day

NVIDIA Update Service Daemon 1.0.21 – ‘nvUpdatusService’ Unquoted Service Path

School ERP Pro 1.0 – Remote Code Execution

Netis E1+ 1.2.32533 – Backdoor Account (root)

Online shopping system advanced 1.0 – ‘p’ SQL Injection

Online Course Registration 2.0 – Authentication Bypass

Maian Support Helpdesk 4.3 – Cross-Site Request Forgery (Add Admin)

Source Engine CS:GO BuildID: 4937372 – Arbitrary Code Execution

PHP-Fusion 9.03.50 – ‘Edit Profile’ Arbitrary File Upload

Netis E1+ V1.2.32533 – Unauthenticated WiFi Password Leak

EspoCRM 5.8.5 – Privilege Escalation