>> TAG: #0day

iScripts ReserveLogic – SQL Injection

WebKitGTK+ – ‘ThreadedCompositor’ Race Condition

SpiderMonkey – IonMonkey Compiled Code Fails to Update Inferred Property Types (Type Confusion)

Inout RealEstate – ‘city’ SQL Injection

Inout EasyRooms – SQL Injection

JioFi 4G M2S 1.0.2 – Cross-Site Request Forgery

WordPress Plugin PayPal Checkout Payment Gateway 1.6.8 – Parameter Tampering

LimeSurvey < 3.16 – Remote Code Execution

CMS Made Simple < 2.2.10 – SQL Injection

AIDA64 Extreme Edition 5.99.4800 – Local SEH Buffer Overflow