>> TAG: #0day

NextVPN v4.10 – Insecure File Permissions

HomeAutomation 3.3.2 – Remote Code Execution

OpenBSD – Dynamic Loader chpass Privilege Escalation (Metasploit)

Microsoft UPnP – Local Privilege Elevation (Metasploit)

Reptile Rootkit – reptile_cmd Privilege Escalation (Metasploit)

HomeAutomation 3.3.2 – Persistent Cross-Site Scripting

HomeAutomation 3.3.2 – Authentication Bypass

HomeAutomation 3.3.2 – Cross-Site Request Forgery (Add Admin)

AVS Audio Converter 9.1.2.600 – Stack Overflow (PoC)

Prime95 Version 29.8 build 6 – Buffer Overflow (SEH)