>> TAG: #0day

Apache Continuum Arbitrary Command Execution

WordPress Social Stream Plugin 1.5.15 – wp_options Overwrite

Easy RM to MP3 Converter 2.7.3.700 – (.m3u) Exploit with Universal DEP+ASLR Bypass

iSQL 1.0 – isql_main.c Buffer Overflow PoC

iSQL 1.0 – Shell Command Injection

FRticket Ticket System – Stored XSS

Zabbix 2.2 – 3.0.3 – RCE with API JSON-RPC

Dream Gallery 2.0 – Admin Panel Authentication Bypass

Joomla PayPlans (com_payplans) Extension 3.3.6 – SQL Injection

Viart Shopping Cart 5.0 – CSRF Shell Upload