Multiple Icecream applications have insecure file permissions that allows for privilege escalation.
>> CATEGORY: exploit
Siemens IP Cameras version 0.1.69 suffers from an arbitrary file download vulnerability.
Open-Xchange App Suite versions 7.8.2 and below suffer from multiple cross site scripting vulnerabilities.
ASUS DSL-X11 ADSL router unauthenticated remote DNS changer exploit.
Antisip libosip2 version 4.1.0 suffers from heap buffer overflow vulnerabilities that can lead to a denial of service.
wdCalendar version 2 suffers from a remote SQL injection vulnerability.
Cherry Music version 0.35.1 suffers from an arbitrary file disclosure vulnerability.
Android has an issue where racy getpidcon usage permits binder service replacement.
Battle.Net version 1.5.0.7963 suffers from an insecure file permissions privilege escalation vulnerability.
Open-Xchange Guard versions 2.4.2 and below suffer from multiple cross site scripting vulnerabilities.