>> TAG: #0day

ira 8.3.4 – Information Disclosure (Username Enumeration)

Schneider Electric U.Motion Builder 1.3.4 – Authenticated Command Injection

P2PWIFICAM2 for iOS 10.4.1 – ‘Camera ID’ Denial of Service (PoC)

Lotus Core CMS 1.0.1 – Local File Inclusion

OpenSMTPD 6.6.2 – Remote Code Execution

rConfig 3.9.3 – Authenticated Remote Code Execution

Kibana 6.6.1 – CSV Injection

Liferay CE Portal 6.0.2 – Remote Command Execution

XMLBlueprint 16.191112 – XML External Entity Injection

Cups Easy 1.0 – Cross Site Request Forgery (Password Reset)