>> TAG: #0day

Snipe-IT Open Source Asset Management 4.7.5 – Persistent Cross-Site Scripting

Omron PLC 1.0.0 – Denial of Service (PoC)

SpotAuditor 5.3.2 – ‘Base64’ Local Buffer Overflow (SEH)

Alcatel-Lucent Omnivista 8770 – Remote Code Execution

Microsoft Windows – Multiple UAC Protection Bypasses

Mozilla FireFox (Windows 10 x64) – Full Chain Client Side Attack

Verot 2.0.3 – Remote Code Execution

Integard Pro NoJs 2.2.0.9026 – Remote Buffer Overflow

Trend Micro Deep Security Agent 11 – Arbitrary File Overwrite

NETGATE Data Backup 3.0.620 – ‘NGDatBckpSrv’ Unquoted Service Path