>> TAG: #0day

Electron WebPreferences – Remote Code Execution

Seagate Personal Cloud SRN21C 4.3.16.0 / 4.3.18.0 – SQL Injection

Responsive FileManager < 9.13.4 – Directory Traversal

Adobe Flash – AVC Processing Out-of-Bounds Read

Sentrifugo HRMS 3.2 – ‘deptid’ SQL Injection

WordPress Plugin Plainview Activity Monitor 20161228 – Command Injection

Libpango 1.40.8 – Denial of Service (PoC)

RICOH MP C4504ex Printer – Cross-Site Request Forgery (Add Admin)

ManageEngine ADManager Plus 6.5.7 – Cross-Site Scripting

WordPress Plugin Gift Voucher 1.0.5 – ‘template_id’ SQL Injection