Visual Voicemail for iPhone – IMAP NAMESPACE Processing Use-After-Free
>> AUTHOR: deepcore
Visual Voicemail for iPhone – IMAP NAMESPACE Processing Use-After-Free
Shopware – createInstanceFromNamedArguments PHP Object Instantiation Remote Code Execution (Metasploit)
Microsoft Windows 10 (17763.379) – Install DLL
Web Application Firewall Bypass Methods
http://www.skp.moe.go.th notified by by_dadaş
Slims CMS Akasia version 8.3.1 suffers from a remote SQL injection vulnerability that allows for authentication bypass.
Security controls configured via php.ini directives at the PHP_INI_SYSTEM level are ineffective as they could be bypassed by malicious scripts via writing their own process memory on the Linux platform….
JavaScriptCore loop-invariant code motion (LICM) in DFG JIT leaves a stack variable uninitialized.
The Microsoft Windows kernel’s Registry Virtualization does not safely open the real key for a virtualization location leading to enumerating arbitrary keys resulting in privilege escalation.
XNU suffers from a wild-read (and possible corruption) due to bad cast in stf_ioctl.