>> ARCHIVE: 2017-12

ZKTeco ZKTime Web version 2.0.1.12280 suffers from a cross site scripting vulnerability.

ZKTeco ZKTime Web version 2.0.1.12280 suffers from a cross site request forgery vulnerability.

WordPress WooCommerce plugin versions 2.0 and 3.0 suffer from a directory traversal vulnerability.

This is a proof of concept for the Huge Dirty Cow vulnerability (CVE-2017-1000405). Before running, make sure to set transparent huge pages to “always” with “echo always | sudo tee…

Windows Defender suffers from a controlled folder bypass through the UNC path. Affected includes Windows 10 1709 and Antimalware client version 4.12.16299.15.

This archive contains all of the 126 exploits added to Packet Storm in November, 2017.