Category: Security

[webapps] Rumpus FTP Web File Manager 8.2.9.1 – Reflected Cross-Site Scripting

[dos] macOS 10.14.6 (18G87) – Kernel Use-After-Free due to Race Condition in wait_for_namespace_event()

[remote] OpenMRS – Java Deserialization RCE (Metasploit)

[webapps] Telerik UI – Remote Code Execution via Insecure Deserialization

[webapps] Zendesk App SweetHawk Survey 1.6 – Persistent Cross-Site Scripting

[webapps] Netgear R6400 – Remote Code Execution

[webapps] NopCommerce 4.2.0 – Privilege Escalation

[webapps] D-Link DIR-615 – Privilege Escalation

[local] Linux 5.3 – Privilege Escalation via io_uring Offload of sendmsg() onto Kernel Thread with Kernel Creds

[webapps] D-Link DIR-615 Wireless Router  –  Persistent Cross-Site Scripting