>> TAG: #0day

Ovidentia 8.4.3 – SQL Injection

WebKit – Universal Cross-Site Scripting due to Synchronous Page Loads

NoviSmart CMS – SQL injection

Cisco Wireless Controller 3.6.10E – Cross-Site Request Forgery

WordPress Plugin Hybrid Composer 1.4.6 – Improper Access Restrictions

Trend Micro Deep Discovery Inspector IDS – Security Bypass

BACnet Stack 0.8.6 – Denial of Service

Comtrend-AR-5310 – Restricted Shell Escape

MAPLE Computer WBT SNMP Administrator 2.0.195.15 – Remote Buffer Overflow (EggHunter)

fuelCMS 1.4.1 – Remote Code Execution