>> CATEGORY: exploit

Ashop Shopping Cart Software suffers from a remote SQL injection vulnerability.

PhreeBooks ERP version 5.2.3 suffers from a remote command execution vulnerability.

PhreeBooks ERP version 5.2.3 suffers from an arbitrary file upload vulnerability.

Clinic Pro version 4 suffers from a remote SQL injection vulnerability.

Apache versions 2.4.17 through 2.4.38 suffer from a local root privilege escalation vulnerability due to an out-of-bounds array access leading to an arbitrary function call.

This Metasploit module exploits a command injection vulnerability in TeemIp versions prior to 2.4.0. The “new_config” parameter of “exec.php” allows you to create a new PHP file with the exception…

Chrome version 73.0.3683.86 stable exploit for chromium issue 941743, tested on Windows 10 x64, which leverages a flaw in the V8 javascript engine.

XNU has an issue where pidversion increment during execve is unsafe.

The compositor thread in WebKitGTK+ might alter a FilterOperation object’s reference count variable at the same time as the main thread. Then the reference count corruption might lead to a…

Chrome suffers from a type confusion vulnerability in V8TrustedTypePolicyOptions::ToImpl.