>> TAG: #0day

Pulse Secure 8.1R15.1/8.2/8.3/9.0 SSL VPN – Remote Code Execution

AwindInc SNMP Service – Command Injection (Metasploit)

WordPress Plugin Download Manager 2.9.93 – Cross-Site Scripting

DASAN Zhone ZNID GPON 2426A EU – Multiple Cross-Site Scripting

ktsuss 1.4 – suid Privilege Escalation (Metasploit)

ptrace – Sudo Token Privilege Escalation (Metasploit)

Cisco UCS Director – default scpuser password (Metasploit)

ChaosPro 2.1 – SEH Buffer Overflow

WordPress Plugin Event Tickets 4.10.7.1 – CSV Injection

ChaosPro 3.1 – SEH Buffer Overflow