>> TAG: #0day

Solaris 11.4 – xscreensaver Privilege Escalation

Joomla! 3.4.6 – Remote Code Execution

WordPress Popup Builder 3.49 – Persistent Cross-Site Scripting

ThinVNC 1.0b1 – Authentication Bypass

Restaurant Management System 1.0 – Remote Code Execution

BlackMoon FTP Server 3.1.2.1731 – ‘BMFTP-RELEASE’ Unquoted Serive Path

Web Companion versions 5.1.1035.1047 – ‘WCAssistantService’ Unquoted Service Path

WordPress Soliloquy Lite 2.5.6 – Persistent Cross-Site Scripting

WordPress FooGallery 1.8.12 – Persistent Cross-Site Scripting

WorkgroupMail 7.5.1 – ‘WorkgroupMail’ Unquoted Service Path