Month: April 2019

[webapps] Clinic Pro v4 – 'month' SQL Injection

[dos] Google Chrome 73.0.3683.39 / Chromium 74.0.3712.0 – 'ReadableStream' Internal Object Leak Type Confusion

[webapps] PhreeBooks ERP 5.2.3 – Arbitrary File Upload

[remote] Cisco RV320 and RV325 – Unauthenticated Remote Code Execution (Metasploit)

[remote] PhreeBooks ERP 5.2.3 – Remote Command Execution

[webapps] Ashop Shopping Cart Software – SQL Injection

[remote] TeemIp IPAM < 2.4.0 – 'new_config' Command Injection (Metasploit)

[local] AIDA64 Business 5.99.4900 – SEH Buffer Overflow (EggHunter)

[dos] WebKit JavaScriptCore – CodeBlock Dangling Watchpoints Use-After-Free

[dos] WebKit JavaScriptCore – Out-Of-Bounds Access in FTL JIT due to LICM Moving Array Access Before the Bounds Check