>> TAG: #0day

QNap QVR Client 5.1.1.30070 – ‘Password’ Denial of Service (PoC)

Online Trade 1 – Information Disclosure

SoftNAS Cloud < 4.0.3 – OS Command Injection

Trivum Multiroom Setup Tool 8.76 – Corss-Site Request Forgery (Admin Bypass)

Core FTP 2.0 – ‘XRMD’ Denial of Service (PoC)

GetGo Download Manager 6.2.1.3200 – Buffer Overflow (Denial of Service)

10-Strike LANState 8.8 – Local Buffer Overflow (SEH)

10-Strike Bandwidth Monitor 3.7 – Local Buffer Overflow (SEH)

Nagios Core 4.4.1 – Denial of Service

Micro Focus Secure Messaging Gateway (SMG) < 471 – Remote Code Execution (Metasploit)