>> ARCHIVE: 2019-04

Zyxel ZyWall 310 / ZyWall 110 / USG1900 / ATP500 / USG40 – Login Page Cross-Site Scripting

Zoho ManageEngine ADManager Plus 6.6 (Build < 6659) – Privilege Escalation

Microsoft Windows 10 1809 – LUAFV NtSetCachedSigningLevel Device Guard Bypass

Microsoft Windows 10 1809 – LUAFV LuafvCopyShortName Arbitrary Short Name Privilege Escalation

Microsoft Windows 10 1809 – LUAFV Delayed Virtualization Cross Process Handle Duplication Privilege Escalation

Microsoft Windows 10 1809 / 1709 – CSRSS SxSSrv Cached Manifest Privilege Escalation

Microsoft Windows 10 1809 – LUAFV Delayed Virtualization MAXIMUM_ACCESS DesiredAccess Privilege Escalation

Joomla Core 1.5.0 – 3.9.4 – Directory Traversal / Authenticated Arbitrary File Deletion

AdminExpress 1.2.5 – ‘Folder Path’ Denial of Service (PoC)

PCHelpWare V2 1.0.0.5 – ‘SC’ Denial of Service (PoC)