>> TAG: #0day

WordPress WP Support Plus Responsive Ticket System 2.0 Plugin – Multiple Vulnerabilities

Joomla Spider Contacts 1.3.6 (index.php, contacts_id param) – SQL Injection

ChatSecure IM 2.2.4 iOS – Persistent XSS Vulnerability

Photorange 1.0 iOS – File Inclusion Vulnerability

OroCRM – Stored XSS Vulnerability

Breaking the Sandbox

PHP Stock Management System 1.02 – Multiple Vulnerabilty

Atmail Webmail 7.2 – Multiple Vulnerabilities

ManageEngine Desktop Central StatusUpdate Arbitrary File Upload

Obfuscated Shellcode Linux x86 – chmod 777 (/etc/passwd + /etc/shadow) & Add New Root User & Execute /bin/bash