>> TAG: #0day

Nexus Repository Manager – Java EL Injection RCE (Metasploit)

Code Blocks 16.01 – Buffer Overflow (SEH) UNICODE

VMware Fusion – USB Arbitrator Setuid Privilege Escalation (Metasploit)

TP-Link Archer A7/C7 – Unauthenticated LAN Remote Code Execution (Metasploit)

ThinkPHP – Multiple PHP Injection RCEs (Metasploit)

Liferay Portal – Java Unmarshalling via JSONWS RCE (Metasploit)

Pandora FMS – Ping Authenticated Remote Code Execution (Metasploit)

PlaySMS – index.php Unauthenticated Template Injection Code Execution (Metasploit)

DotNetNuke – Cookie Deserialization Remote Code Execution (Metasploit)

Apache Solr – Remote Code Execution via Velocity Template (Metasploit)