>> CATEGORY: Security

Rumpus FTP Web File Manager 8.2.9.1 – Reflected Cross-Site Scripting

macOS 10.14.6 (18G87) – Kernel Use-After-Free due to Race Condition in wait_for_namespace_event()

OpenMRS – Java Deserialization RCE (Metasploit)

Telerik UI – Remote Code Execution via Insecure Deserialization

Zendesk App SweetHawk Survey 1.6 – Persistent Cross-Site Scripting

Netgear R6400 – Remote Code Execution

NopCommerce 4.2.0 – Privilege Escalation

D-Link DIR-615 – Privilege Escalation

Linux 5.3 – Privilege Escalation via io_uring Offload of sendmsg() onto Kernel Thread with Kernel Creds

D-Link DIR-615 Wireless Router  –  Persistent Cross-Site Scripting