CVE-2016-15000 to CVE-2016-15999

14 CVEs with public proof-of-concept exploits.

• CVE-2016-150021 PoCMONyog Ultimate Cookie privileges management
• CVE-2016-150032 PoCsFileZilla Client Installer uninstall.exe unquoted search path
• CVE-2016-150381 PoCNUUO NVRmini 2 deletefile.php path traversal
• CVE-2016-150412 PoCsMainWP Dashboard – The Private WordPress Manager for Multiple Website Maintenance Plugin <= 3.1.2 - Stored Cross-Site Scripting
• CVE-2016-150423 PoCsFrontend File Manager < 4.0 & N-Media Post Front-end Form < 1.1 & - Arbitrary File Upload
• CVE-2016-150435 PoCsWP Mobile Detector <= 3.5 - Arbitrary File Upload
• CVE-2016-150444 PoCsKaltura < 11.1.0-2 PHP Object Injection RCE
• CVE-2016-150454 PoCsDeepin lastore-daemon Privilege Escalation via Unsigned .deb Installation
• CVE-2016-150461 PoCHanwha Techwin SSM 1.32 & 1.4 ActiveMQ File Upload RCE
• CVE-2016-150471 PoCAVTECH CloudSetup.cgi Authenticated Command Injection
• CVE-2016-150481 PoCAMTT HiBOS Command Injection RCE via server_ping.php
• CVE-2016-150551 PoCJVC VN-T IP-Camera Directory Traversal via check.cgi
• CVE-2016-150563 PoCsUbee EVW3226 Unauthenticated Backup File Disclosure
• CVE-2016-150571 PoCApache Continuum: Command injection leading to RCE