>> CATEGORY: exploit

…

The interaction between the kernel /dev/binder and the usermode Parcel.cpp mean that when a binder object is passed as BINDER_TYPE_BINDER or BINDER_TYPE_WEAK_BINDER, a pointer to that object (in the server…

Plone CMS versions 4.3.11 and below and versions 5.0.6 and below suffer from cross site scripting, open redirection, and path traversal vulnerabilities.

Limny version 3.2.2 suffers from a local file inclusion vulnerability.

Limny version 3.0.2 suffers from a local file inclusion vulnerability.

iWisoft Video Converter version 1.2 suffers from a dll hijacking vulnerability.

Limny version 2.2 suffers from an expression language injection vulnerability.

Double-free and invalid-free vulnerabilities in x509 parsing were found in the latest OpenSSL (1.1.0b).

ApPHP MicroCMS version 3.9.5 suffers from a cross site request forgery vulnerability.

OpenCimetiere version 3.0.0-a5 suffers from a remote blind SQL injection vulnerability.