Month: October 2017

[webapps] OpenText Documentum Content Server – Privilege Escalation

[dos] Microsoft Windows – 'nt!NtQueryObject (ObjectNameInformation)' Kernel Pool Memory Disclosure

[remote] Apple iOS 10.2 (14C92) – Remote Code Execution

[dos] Microsoft Windows 10 – WLDP/MSHTML CLSID UMCI Bypass

[dos] Microsoft Edge Chakra – Accesses to Uninitialized Pointers in 'StackScriptFunction::BoxState::Box'

[dos] Microsoft Edge Chakra JIT – 'RegexHelper::StringReplace' Must Call the Callback Function with Updating ImplicitCallFlags

[dos] Microsoft Edge Chakra JIT – Incorrect GenerateBailOut Calling Patterns

[webapps] 3CX Phone System 15.5.3554.1 – Directory Traversal

[shellcode] Windows x64 – API Hooking Shellcode (117 bytes)