>> TAG: #0day

LayerBB 1.1.2 – Cross-Site Request Forgery (Add Admin)

exacqVision ESM 5.12.2 – Privilege Escalation

DomainMOD 4.11.01 – ‘ssl-accounts.php username’ Cross-Site Scripting

DomainMOD 4.11.01 – ‘ssl-provider-name’ Cross-Site Scripting

DomainMOD 4.11.01 – ‘assets/add/dns.php’ Cross-Site Scripting

DomainMOD 4.11.01 – ‘category.php CatagoryName, StakeHolder’ Cross-Site Scripting

DomainMOD 4.11.01 – ‘assets/edit/host.php?whid=5’ Cross-Site Scripting

WordPress Plugin Booking Calendar 8.4.3 – Authenticated SQL Injection

MediaMonkey 4.1.23 – ‘.mp3’ URL Denial of Service (PoC)

ApowerManager 3.1.7 – Phone Manager Remote Denial of Service (DoS)