>> TAG: #0day

Seagate Personal Cloud – Multiple Vulnerabilities

Transmission – RPC DNS Rebinding

Synology Photostation 6.7.2-3429 – Remote Code Execution (Metasploit)

Linux/x86 – execve /bin/dash Shellcode (30 bytes)

DiskBoss Enterprise 8.8.16 – Buffer Overflow

Muviko 1.1 – SQL Injection

WordPress Plugin Events Calendar – ‘event_id’ SQL Injection

WordPress Plugin Social Media Widget by Acurax 3.2.5 – Cross-Site Request Forgery

WordPress Plugin Admin Menu Tree Page View 2.6.9 – Cross-Site Request Forgery / Privilege Escalation

WordPress Plugin CMS Tree Page View 1.4 – Cross-Site Request Forgery / Privilege Escalation