>> TAG: #0day

Sync Breeze Enterprise 10.1.16 – Buffer Overflow (SEH) (Metasploit)

phpMyFAQ 2.9.8 – Cross-Site Scripting

AlienVault Unified Security Management (USM) 5.4.2 – Cross-Site Request Forgery

E-Sic Software livre CMS – ‘q’ Parameter SQL Injection

Linux/x86 – execve(/bin/sh) Polymorphic Shellcode (30 bytes)

E-Sic Software livre CMS – Cross Site Scripting

E-Sic Software livre CMS – Autentication Bypass

E-Sic Software livre CMS – ‘f’ Parameter SQL Injection

OctoberCMS 1.0.425 (Build 425) – Cross-Site Scripting

E-Sic Software livre CMS – ‘cpfcnpj’ Parameter SQL Injection