>> TAG: #0day

Smartwares HOME easy 1.0.9 – Client-Side Authentication Bypass

Smartwares HOME easy 1.0.9 – Database Backup Information Disclosure

rimbalinux AhadPOS 1.11 – ‘alamatCustomer’ SQL Injection

html5_snmp 1.11 – ‘Remark’ Persistent Cross-Site Scripting

FileOptimizer 14.00.2524 – Denial of Service (PoC)

html5_snmp 1.11 – ‘Router_ID’ SQL Injection

SD.NET RIM 4.7.3c – ‘idtyp’ SQL Injection

JavaScriptCore – Type Confusion During Bailout when Reconstructing Arguments Objects

Network Inventory Advisor 5.0.26.0 – ‘niaservice’ Unquoted Service Path

thejshen Globitek CMS 1.4 – ‘id’ SQL Injection