>> TAG: #0day

Evince – CBT File Command Injection (Metasploit)

NUUO NVRmini – upgrade_handle.php Remote Command Execution (Metasploit)

NordVPN 6.19.6 – Denial of Service (PoC)

Indusoft Web Studio 8.1 SP2 – Remote Code Execution

Avast Anti-Virus < 19.1.2360 – Local Credentials Disclosure

IPFire 2.21 – Cross-Site Scripting

River Past Video Cleaner 7.6.3 – Local Buffer Overflow (SEH)

MyBB Bans List 1.0 – Cross-Site Scripting

VA MAX 8.3.4 – Authenticated Remote Code Execution

River Past Cam Do 3.7.6 – Local Buffer Overflow (SEH)