>> TAG: #0day

Webiness Inventory 2.9 – Arbitrary File Upload

University Application System 1.0 – SQL Injection / Cross-Site Request Forgery (Add Admin)

Library Management System 1.0 – ‘frmListBooks’ SQL Injection

Grapixel New Media 2 – ‘pageref’ SQL Injection

Open Faculty Evaluation System 5.6 – ‘batch_name’ SQL Injection

Modbus Slave PLC 7 – ‘.msw’ Buffer Overflow (PoC)

Paramiko 2.4.1 – Authentication Bypass

AlienIP 2.41 – Denial of Service (PoC)

Local Server 1.0.9 – Denial of Service (PoC)

School Equipment Monitoring System 1.0 – ‘login’ SQL Injection