>> TAG: #0day

WordPress Ultimate Product Catalog Plugin 3.8.1 – Privilege Escalation

Tomabo MP4 Player 3.11.6 – SEH Based Stack Overflow (msf)

sNews CMS 1.7.1 – Multiple Vulnerabilities

Windows XP – 10 – Download & Execute Shellcode

Airia – (Add content) CSRF

Premium SEO Pack 1.9.1.3 – wp_options Overwrite

Linux x86_64 execve Shellcode – 15 bytes

Joomla BT Media (com_bt_media) Component – SQL Injection

Airia – Webshell Upload Exploit

Vicidial 2.11 – Scripts Stored XSS