>> TAG: #0day

EyesOfNetwork – AutoDiscovery Target Command Execution (Metasploit)

UniSharp Laravel File Manager 2.0.0 – Arbitrary File Read

GUnet OpenEclass 1.7.3 E-learning platform – ‘month’ SQL Injection

RICOH Aficio SP 5200S Printer – ‘entryNameIn’ HTML Injection

Alfresco 5.2.4 – Persistent Cross-Site Scripting

RICOH Aficio SP 5210SF Printer – ‘entryNameIn’ HTML Injection

Cyberoam Authentication Client 2.1.2.7 – Buffer Overflow (SEH)

Joplin Desktop 1.0.184 – Cross-Site Scripting

Netis WF2419 2.2.36123 – Remote Code Execution

TL-WR849N 0.9.1 4.16 – Authentication Bypass (Upload Firmware)