>> AUTHOR: deepcore

Linux kvm_ioctl_create_device() installs fd before taking reference.

WordPress Booking Calendar version 8.4.3 suffers from a remote SQL injection vulnerability.

exacqVision ESM version 5.12.2 suffers from a privilege escalation vulnerability.

MediaMonkey version 4.1.23 suffers from a denial of service vulnerability.

LayerBB version 1.1.2 suffers from a cross site request forgery vulnerability.

DomainMOD version 4.11.01 suffers from multiple cross site scripting vulnerabilities.

ApowerManager version 3.1.7 suffers from a denial of service vulnerability.

Core FTP/SFTP Server version 1.2 build 589.42 suffers from a denial of service vulnerability.

This is exploit code for CVE-2019-5736 (and it works for both runc and LXC). The simplest way to use it is to copy the exploit code into an existing container,…