This Metasploit module writes an execution trigger to the target’s Bash profile. The execution trigger executes a call back payload whenever the target user opens a Bash terminal. A handler…
>> AUTHOR: deepcore
Apple Security Advisory 2019-12-10-1 – iOS 13.3 and iPadOS 13.3 is now available and addresses code execution and information leakage vulnerabilities.
Zendesk App SweetHawk Survey 1.6 – Persistent Cross-Site Scripting
Netgear R6400 – Remote Code Execution
NopCommerce 4.2.0 – Privilege Escalation
https://www.sme.go.th/readme.htm notified by Dijehaji
D-Link DIR-615 – Privilege Escalation
Linux 5.3 – Privilege Escalation via io_uring Offload of sendmsg() onto Kernel Thread with Kernel Creds
D-Link DIR-615 Wireless Router – Persistent Cross-Site Scripting
Roxy Fileman 1.4.5 – Directory Traversal