>> TAG: #0day

AMSS++ 4.7 – Backdoor Admin Account

CandidATS 2.1.0 – Cross-Site Request Forgery (Add Admin)

Core FTP Lite 1.3 – Denial of Service (PoC)

Easy2Pilot 7 – Cross-Site Request Forgery (Add User)

Virtual Freer 1.58 – Remote Command Execution

DBPower C300 HD Camera – Remote Configuration Disclosure

WordPress Plugin WP Sitemap Page 1.6.2 – Persistent Cross-Site Scripting

SOPlanning 1.45 – ‘by’ SQL Injection

MSI Packages Symbolic Links Processing – Windows 10 Privilege Escalation

Ice HRM 26.2.0 – Cross-Site Request Forgery (Add User)