>> TAG: #0day

FS Thumbtack Clone 1.0 – ‘cat’ / ‘sc’ SQL Injection

FS Shutterstock Clone 1.0 – ‘keywords’ SQL Injection

Website Auction Marketplace 2.0.5 – ‘cat_id’ SQL Injection

FS Monster Clone 1.0 – ‘Employer_Details.php?id’ SQL Injection

FS Makemytrip Clone 1.0 – ‘fl_orig’ / ‘fl_dest’ SQL Injection

FS IMDB Clone – ‘id’ SQL Injection

Microsoft Windows Defender – Controlled Folder Bypass Through UNC Path

OpenEMR 5.0.0 – OS Command Injection / Cross-Site Scripting

Polycom Shell HDX Series – Traceroute Command Execution (Metasploit)

Claymore Dual ETH + DCR/SC/LBC/PASC GPU Miner – Stack Buffer Overflow / Path Traversal