>> TAG: #0day

MSN Password Recovery 1.30 – XML External Entity Injection

Codoforum 4.8.3 – ‘input_txt’ Persistent Cross-Site Scripting

Cisco DCNM JBoss 10.4 – Credential Leakage

Online Book Store 1.0 – Unauthenticated Remote Code Execution

EBBISLAND EBBSHAVE 6100-09-04-1441 – Remote Buffer Overflow

ASTPP VoIP 4.0.1 – Remote Code Execution

JetBrains TeamCity 2018.2.4 – Remote Code Execution

Tomcat proprietaryEvaluate 9.0.0.M1 – Sandbox Escape

Job Portal 1.0 – Remote Code Execution

AnyDesk 5.4.0 – Unquoted Service Path