>> TAG: #0day

E-Sic Software livre CMS – ‘cpfcnpj’ Parameter SQL Injection

Trend Micro OfficeScan 11.0/XG (12.0) – Remote Code Execution (Metasploit)

Trend Micro InterScan Messaging Security (Virtual Appliance) – Remote Code Execution (Metasploit)

ASX to MP3 3.1.3.7 – ‘.m3u’ Buffer Overflow

Complain Management System – Hard-Coded Credentials / Blind SQL injection

Rancher Server – Docker Daemon Code Execution (Metasploit)

OrientDB 2.2.2 – 2.2.22 – Remote Code Execution (Metasploit)

QNAP HelpDesk < 1.1.12 – SQL Injection

PyroBatchFTP 3.17 – Buffer Overflow (SEH)

Microsoft Windows 10 x64 RS2 – ‘win32kfull!bFill’ Pool Overflow