>> TAG: #0day

nipper-ng 0.11.10 – Remote Buffer Overflow (PoC)

Shrew Soft VPN Client 2.2.2 – ‘iked’ Unquoted Service Path

Siemens Desigo PX 6.00 – Denial of Service (PoC)

oXygen XML Editor 21.1.1 – XML External Entity Injection

Xfilesharing 2.5.1 – Arbitrary File Upload

FUDForum 3.0.9 – Remote Code Execution

Technicolor TD5130.2 – Remote Command Execution

Technicolor TC7300.B0 – ‘hostname’ Persistent Cross-Site Scripting

gSOAP 2.8 – Directory Traversal

Fastweb Fastgate 0.00.81 – Remote Code Execution