>> TAG: #0day

ISPConfig < 3.1.13 – Remote Command Execution

D-Link Central WiFiManager Software Controller 1.03 – Multiple Vulnerabilities

Chamilo LMS 1.11.8 – Cross-Site Scripting

Linuxx86 – (NOT +SHIFT-N+ XOR-N) + encoded (/bin/sh) Shellcode (50 byes)

virtualenv 16.0.0 – Sandbox Escape

LayerBB Forum 1.1.1 – ‘search_query’ SQL Injection

Zechat 1.5 – ‘uname’ SQL Injection

Joomla! Component Jimtawl 2.2.7 – ‘id’ SQL Injection

Airties AIR5342 1.0.0.18 – Cross-Site Scripting

OPAC EasyWeb Five 5.7 – ‘nome’ SQL Injection