>> TAG: #0day

Google AdWords API PHP client library <= 6.2.0 – Arbitrary PHP Code Execution

eBay Magento CE <= 1.9.2.1 – Unrestricted Cron Script (Potential Code Execution / DoS)

WordPress Ajax Load More PHP Upload Vulnerability

POP Peeper 4.0.1 – SEH Over-Write

Arris TG1682G Modem – Stored XSS Vulnerability

TestLink 1.9.14 – CSRF Vulnerability

FreeType 2.6.1 TrueType tt_sbit_decoder_load_bit_aligned Heap-Based Out-of-Bounds Read

Cryptocat Arbitrary Script Injection Vulnerability

QNap QVR Client 5.1.0.11290 – Crash PoC

NXFilter 3.0.3 – Multiple XSS Vulnerabilities