>> TAG: #0day

ZKTeco ZKAccess Security System 5.3.1 – Persistent Cross-Site Scripting

PHP 7.0 – AppendIterator::append Local Denial of Service

ZKTeco ZKBioSecurity 3.0 – (visLogin.jsp) Local Authorization Bypass

ZKTeco ZKBioSecurity 3.0 – Hardcoded Credentials Remote SYSTEM Code Execution

ZKTeco ZKBioSecurity 3.0 – Directory Traversal

ZKTeco ZKTime.Net 3.0.1.6 – Insecure File Permissions Privilege Escalation

ZKTeco ZKBioSecurity 3.0 – (Add Superadmin) Cross-Site Request Forgery

PHP 5.0.0 – snmpset() Local Denial of Service

PHP 5.0.0 – hw_docbyanchor() Local Denial of Service

PHP 5.0.0 – imap_mail() Local Denial of Service