>> TAG: #0day

Western Digital MyCloud – ‘multi_uploadify’ File Upload (Metasploit)

Zoom Linux Client 2.0.106600.0904 – Command Injection

CDex 1.96 – Buffer Overflow

Linux/x64 – Custom Encoded XOR + execve(/bin/sh) Shellcode

ITGuard-Manager 0.0.0.1 – Remote Code Execution

Sync Breeze 10.2.12 – Denial of Service

Movie Guide 2.0 – SQL Injection

FS Lynda Clone 1.0 – SQL Injection

Bus Booking Script 1.0 – ‘txtname’ SQL Injection

Paid To Read Script 2.0.5 – ‘uid’ / ‘fnum’ / ‘fn’ SQL Injection