>> TAG: #0day

Ricoh myPrint 2.9.2.4 – Hard-Coded Credentials

WordPress Plugins Easy Testimonials 3.2 – Cross-Site Scripting

MariaDB Client 10.1.26 – Denial of Service (PoC)

No-Cms 1.0 – ‘order_by’ SQL Injection

Zyxel VMG1312-B10D 5.13AAXA.8 – Directory Traversal

CORS Attacks

CORS Attacks

Arm Whois 3.11 – Buffer Overflow (ASLR)

Xorg X11 Server – SUID privilege escalation (Metasploit)

Synaccess netBooter NP-0801DU 7.4 – Cross-Site Request Forgery (Add Admin)