Month: April 2018

[remote] Drupal < 7.58 – 'Drupalgeddon3' Authenticated Remote Code (Metasploit)

[webapps] Nagios XI 5.2.[6-9], 5.3, 5.4 – Chained Remote Root

[webapps] WordPress Plugin Form Maker 1.12.20 – CSV Injection

[dos] macOS 10.13.2 – Double mach_port_deallocate in kextd due to Failure to Comply with MIG Ownership Rules

[dos] Navicat < 12.0.27 – Oracle Connection Overflow

[dos] macOS/iOS – ReportCrash mach port Replacement due to Failure to Respect MIG Ownership Rules