>> TAG: #0day

EMC xPression 4.5SP1 Patch 13 – ‘model.jobHistoryId’ SQL Injection

[Hebrew] Digital Whisper Security Magazine #90

Cambium ePMP1000 – ‘get_chart’ Shell via Command Injection (Metasploit)

Cambium ePMP1000 – ‘ping’ Shell via Command Injection (Metasploit)

HP Mercury LoadRunner Agent magentproc.exe – Remote Command Execution (Metasploit)

D3DGear 5.00 Build 2175 – Buffer Overflow

PHP Melody 2.7.1 – ‘playlist’ SQL Injection

NetTransport 2.96L – Buffer Overflow (DEP Bypass)

ALLMediaServer 0.95 – Buffer Overflow (Metasploit)

Sony Playstation 4 4.05 FW – Local Kernel Exploit