>> ARCHIVE: 2019-04

Clinic Pro v4 – ‘month’ SQL Injection

Google Chrome 73.0.3683.39 / Chromium 74.0.3712.0 – ‘ReadableStream’ Internal Object Leak Type Confusion

PhreeBooks ERP 5.2.3 – Arbitrary File Upload

Cisco RV320 and RV325 – Unauthenticated Remote Code Execution (Metasploit)

PhreeBooks ERP 5.2.3 – Remote Command Execution

Ashop Shopping Cart Software – SQL Injection

TeemIp IPAM < 2.4.0 – 'new_config' Command Injection (Metasploit)

AIDA64 Business 5.99.4900 – SEH Buffer Overflow (EggHunter)

WebKit JavaScriptCore – CodeBlock Dangling Watchpoints Use-After-Free

WebKit JavaScriptCore – Out-Of-Bounds Access in FTL JIT due to LICM Moving Array Access Before the Bounds Check