>> TAG: #0day

SuiteCRM 7.10.7 – ‘parentTab’ SQL Injection

SuiteCRM 7.10.7 – ‘record’ SQL Injection

River Past Ringtone Converter 2.7.6.1601 – Denial of Service (PoC)

SpotAuditor 3.6.7 – Denial of Service (PoC)

TaskInfo 8.2.0.280 – Denial of Service (PoC)

pfSense 2.4.4-p1 – Cross-Site Scripting

ResourceSpace 8.6 – ‘watched_searches.php’ SQL Injection

Nessus 8.2.1 – Cross-Site Scripting

Remote Code Execution with EL Injection Vulnerabilities

SureMDM < 2018-11 Patch – Local / Remote File Inclusion