>> TAG: #0day

WordPress Plugin Comments Import & Export < 2.0.4 – CSV Injection

Intex Router N-150 – Cross-Site Request Forgery (Add Admin)

Intex Router N-150 – Arbitrary File Upload

Security of Modern Bluetooth Keyboards

Ecessa ShieldLink SL175EHQ < 10.7.4 – Cross-Site Request Forgery (Add Superuser)

DIGISOL DG-BR4000NG – Buffer Overflow (PoC)

AsusWRT RT-AC750GF – Cross-Site Request Forgery (Change Admin Password)

Ecessa Edge EV150 10.7.4 – Cross-Site Request Forgery (Add Superuser)

Ecessa WANWorx WVR-30 < 10.7.4 – Cross-Site Request Forgery (Add Superuser)

WordPress Plugin iThemes Security < 7.0.3 – SQL Injection