>> TAG: #0day

AUO SunVeillance Monitoring System 1.1.9e – Incorrect Access Control

AUO SunVeillance Monitoring System 1.1.9e – ‘MailAdd’ SQL Injection

Rocket.Chat 2.1.0 – Cross-Site Scripting

IObit Uninstaller 9.1.0.8 – ‘IObitUnSvr’ Unquoted Service Path

Joomla! 3.4.6 – Remote Code Execution (Metasploit)

Total.js CMS 12 – Widget JavaScript Code Injection (Metasploit)

winrar 5.80 – XML External Entity Injection

Trend Micro Anti-Threat Toolkit 1.62.0.1218 – Remote Code Execution

Adobe Acrobat Reader DC for Windows – Heap-Based Buffer Overflow due to Malformed JP2 Stream (2)

winrar 5.80 64bit – Denial of Service