Tag: 0day

[webapps] WordPress Theme Zoner Real Estate – 4.1.1 Persistent Cross-Site Scripting

[webapps] Duplicate-Post 3.2.3 – Persistent Cross-Site Scripting

[webapps] all-in-one-seo-pack 3.2.7 – Persistent Cross-Site Scripting

[webapps] inoERP 4.15 – 'download' SQL Injection

[webapps] citecodecrashers Pic-A-Point 1.1 – 'Consignment' SQL Injection

[webapps] Chamillo LMS 1.11.8 – Arbitrary File Upload

[webapps] Microsoft SharePoint 2013 SP1 – 'DestinationFolder' Persistant Cross-Site Scripting

[dos] SpotIE Internet Explorer Password Recovery 2.9.5 – 'Key' Denial of Service

[dos] DeviceViewer 3.12.0.1 – 'creating user' Denial of Service

[dos] Microsoft Windows cryptoapi – SymCrypt Modular Inverse Algorithm Denial of Service