>> TAG: #0day

HeidiSQL 9.5.0.5196 – Denial of Service (PoC)

Facturation System 1.0 – ‘modid’ SQL Injection

Easyndexer 1.0 – Cross-Site Request Forgery (Add Admin)

CuteFTP 9.3.0.3 – Denial of Service (PoC)

GPS Tracking System 2.12 – ‘username’ SQL Injection

ServerZilla 1.0 – ’email’ SQL Injection

D-LINK Central WifiManager CWM-100 – Server-Side Request Forgery

Mongoose Web Server 6.9 – Denial of Service (PoC)

Nominas 0.27 – ‘username’ SQL Injection

Linux/x64 – Bind TCP (4444/TCP) Shell (/bin/sh) + Password (1234567) Shellcode (136 bytes)