>> TAG: #0day

EA Origin < 10.5.38 – Remote Code Execution

Sony PlayStation Vita (PS Vita) – Trinity: PSP Emulator Escape

Tuneclone 2.20 – Local SEH Buffer Overflow

WebERP 4.15 – SQL injection

BlogEngine.NET 3.3.6/3.3.7 – XML External Entity Injection

Linux – Use-After-Free via race Between modify_ldt() and #BR Exception

Cisco Prime Infrastructure Health Monitor – TarArchive Directory Traversal (Metasploit)

Cisco Prime Infrastructure – Runrshell Privilege Escalation (Metasploit)

BlogEngine.NET 3.3.6/3.3.7 – ‘dirPath’ Directory Traversal / Remote Code Execution

BlogEngine.NET 3.3.6/3.3.7 – ‘theme Cookie’ Directory Traversal / Remote Code Execution