>> TAG: #0day

WordPress InfiniteWP – Client Authentication Bypass (Metasploit)

Disk Savvy Enterprise 12.3.18 – Unquoted Service Path

Wedding Slideshow Studio 1.36 – ‘Name’ Buffer Overflow

OpenSMTPD 6.4.0 < 6.6.1 – Local Privilege Escalation + Remote Code Execution

Wedding Slideshow Studio 1.36 – ‘Key’ Buffer Overflow

Forcepoint WebSecurity 8.5 – Reflective Cross-Site Scripting

LearnDash WordPress LMS Plugin 3.1.2 – Reflective Cross-Site Scripting

Windscribe – WindscribeService Named Pipe Privilege Escalation (Metasploit)

ExpertGPS 6.38 – XML External Entity Injection

QuickDate 1.3.2 – SQL Injection