>> TAG: #0day

PaulNews 1.0 – ‘keyword’ SQL Injection / Cross-Site Scripting

ASP.NET jVideo Kit – ‘query’ SQL Injection

Timber 1.1 – Cross-Site Request Forgery

GNU glibc < 2.27 – Local Buffer Overflow

Siemens SCALANCE S613 – Remote Denial of Service

SKT LTE Wi-Fi SDT-CW3B1 – Unauthorized Admin Credential Change

FTPShell Server 6.80 – Buffer Overflow (SEH)

NewsBee CMS 1.4 – Cross-Site Request Forgery

FTPShell Server 6.80 – Denial of Service

Honeywell Scada System – Information Disclosure