>> ARCHIVE: 2019-01

polkit – Temporary auth Hijacking via PID Reuse and Non-atomic Fork

Linux/x86 – wget chmod execute over execve /bin/sh -c Shellcode (119 bytes)

ZTE MF65 BD_HDV6MF65V1.0.0B05 – Cross-Site Scripting

Microsoft Office SharePoint Server 2016 – Denial of Service (Metasploit)

Google Chrome V8 JavaScript Engine 71.0.3578.98 – Out-of-Memory. Denial of Service (PoC)

Heatmiser Wifi Thermostat 1.7 – Cross-Site Request Forgery (Update Admin)

Microsoft Windows – DSSVC CheckFilePermission Arbitrary File Deletion