>> TAG: #0day

D-Link DWL-2600AP – Multiple OS Command Injection

TwistedBrush Pro Studio 24.06 – ‘Resize Image’ Denial of Service (PoC)

TwistedBrush Pro Studio 24.06 – ‘Script Recorder’ Denial of Service (PoC)

TwistedBrush Pro Studio 24.06 – ‘.srp’ Denial of Service (PoC)

Sales ERP 8.1 – Multiple SQL Injection

PHP-Fusion 9.03.00 – ‘Edit Profile’ Remote Code Execution (Metasploit)

PasteShr 1.6 – Multiple SQL Injection

Schneider Electric U.Motion Builder 1.3.4 – ‘track_import_export.php object_id’ Unauthenticated Command Injection

SpotMSN 2.4.6 – Denial of Service (PoC)

DNSS 2.1.8 – Denial of Service (PoC)