>> TAG: #0day

DomainMOD 4.11.01 – Custom Domain Fields Cross-Site Scripting

DomainMOD 4.11.01 – Custom SSL Fields Cross-Site Scripting

NUUO NVRMini2 3.9.1 – Authenticated Command Injection

DomainMOD 4.11.01 – Registrar Cross-Site Scripting

Wireshark – ‘cdma2k_message_ACTIVE_SET_RECORD_FIELDS’ Stack Corruption

Wireshark – ‘find_signature’ Heap Out-of-Bounds Read

HP Intelligent Management – Java Deserialization RCE (Metasploit)

Emacs – movemail Privilege Escalation (Metasploit)

NEC Univerge Sv9100 WebPro – 6.00 – Predictable Session ID / Clear Text Password Storage

DomainMOD 4.11.01 – Owner name Field Cross-Site Scripting