>> TAG: #0day

Logicspice FAQ Script 2.9.7 – Remote Code Execution

iSmartViewPro 1.5 – ‘DDNS’ Buffer Overflow

PHP File Browser Script 1 – Directory Traversal

Visual Ping 0.8.0.0 – ‘Host’ Denial of Service (PoC)

D-Link DIR-615 – Denial of Service (PoC)

VSAXESS V2.6.2.70 build20171226_053 – ‘Nickname’ Denial of Service (PoC)

Symantec Mobile Encryption for iPhone 2.1.0 – ‘Server’ Denial of Service (PoC)

Trend Micro Virtual Mobile Infrastructure 5.5.1336 – ‘Server address’ Denial of Service (PoC)

Online Quiz Maker 1.0 – ‘catid’ SQL Injection

FsPro Labs Event Log Explorer v4.6.1.2115 – XML External Entity Injection