Month: January 2019

[webapps] Blueimp's jQuery File Upload 9.22.0 – Arbitrary File Upload Exploit

[dos] Google Chrome V8 JavaScript Engine 71.0.3578.98 – Out-of-Memory in Invalid Array Length

[webapps] GL-AR300M-Lite 2.27 – Authenticated Command Injection / Arbitrary File Download / Directory Traversal

[webapps] Coship Wireless Router 4.0.0.48 / 4.0.0.40 / 5.0.0.54 / 5.0.0.55 / 10.0.0.49 – Unauthenticated Admin Password Reset

[dos] NTPsec 1.1.2 – 'ntp_control' Authenticated NULL Pointer Dereference (PoC)

[dos] NTPsec 1.1.2 – 'config' Authenticated Out-of-Bounds Write Denial of Service (PoC)

[dos] Microsoft Windows 10 – 'RestrictedErrorInfo' Unmarshal Section Handle Use-After-Free

[dos] NTPsec 1.1.2 – 'ntp_control' Out-of-Bounds Read (PoC)

[webapps] doorGets CMS 7.0 – Arbitrary File Download

[webapps] ShoreTel / Mitel Connect ONSITE 19.49.5200.0 – Remote Code Execution