>> TAG: #0day

ManageEngine ServiceDesk Plus 9.0 (< Build 9031) – User Privileges Management Vulnerability

PHP Webquest 2.6 – SQL Injection

VLC Player 2.1.5 – DEP Access Violation Vulnerability

Comodo Backup 4.4.0.0 – NULL Pointer Dereference EOP

Mangallam CMS – SQL Injection Web Vulnerability

Crystal Player 1.99 – Memory Corruption Vulnerability

Windows < 8.1 (32/64 bit) – Privilege Escalation (User Profile Service) (MS15-003)

Exif Pilot 4.7.2 – SEH Based Buffer Overflow

Bsplayer 2.68 – HTTP Response Buffer Overflow

ManageEngine Multiple Products Authenticated File Upload