>> TAG: #0day

ClipBucket – beats_uploader Unauthenticated Arbitrary File Upload (Metasploit)

TestLink Open Source Test Management < 1.9.16 – Remote Code Execution (PoC)

LabF nfsAxe 3.7 – Privilege Escalation

Laravel Log Viewer < 0.13.0 – Local File Download

Acrolinx Server < 5.2.5 – Directory Traversal

Android Bluetooth – BNEP BNEP_SETUP_CONNECTION_REQUEST_MSG Out-of-Bounds Read

Android Bluetooth – BNEP bnep_data_ind() Remote Heap Disclosure

WM Recorder 16.8.1 – Denial of Service

MyBB Plugin Last User’s Threads in Profile Plugin 1.2 – Persistent Cross-Site Scripting

Hikvision IP Camera versions 5.2.0 – 5.3.9 (Builds 140721 – 170109) – Access Control Bypass