>> TAG: #0day

WordPress MiwoFTP Plugin 1.0.5 CSRF Arbitrary File Creation Exploit (RCE)

Samsung iPOLiS ReadConfigValue Remote Code Execution

ProFTPd 1.3.5 – File Copy

u-Auctions – Multiple Vulnerabilities

WordPress N-Media Website Contact Form with File Upload 1.3.4 – Shell Upload Vulnerability

Traidnt Up 3.0 – SQL Injection

JBoss AS versions 3, 4, 5, 6 – Remote Command Execution

WordPress Duplicator <= 0.5.14 – SQL Injection & CSRF

Create ‘my.txt’ Working Directory (37 Bytes)

Internet Download Manager 6.xx – DLL Hijacking