>> TAG: #0day

DHCP Turbo 4.61298 – ‘DHCP Turbo 4’ Unquoted Service Path

WordPress Theme Fruitful 3.8 – Persistent Cross-Site Scripting

TFTP Turbo 4.6.1273 – ‘TFTP Turbo 4’ Unquoted Service Path

SOPlanning 1.45 – Cross-Site Request Forgery (Add User)

BOOTP Turbo 2.0.1214 – ‘BOOTP Turbo’ Unquoted Service Path

Avaya Aura Communication Manager 5.2 – Remote Code Execution

SOPlanning 1.45 – ‘users’ SQL Injection

Cuckoo Clock v5.0 – Buffer Overflow

HP System Event 1.2.9.0 – ‘HPWMISVC’ Unquoted Service Path

WordPress Plugin Strong Testimonials 2.40.1 – Persistent Cross-Site Scripting