Category: Security

[local] Linux Polkit – pkexec helper PTRACE_TRACEME local root (Metasploit)

[webapps] WordPress Sliced Invoices 3.8.2 – 'post' SQL Injection

[webapps] AUO SunVeillance Monitoring System 1.1.9e – Incorrect Access Control

[webapps] AUO SunVeillance Monitoring System 1.1.9e – 'MailAdd' SQL Injection

[webapps] Rocket.Chat 2.1.0 – Cross-Site Scripting

[local] IObit Uninstaller 9.1.0.8 – 'IObitUnSvr' Unquoted Service Path

[webapps] Joomla! 3.4.6 – Remote Code Execution (Metasploit)

[remote] Total.js CMS 12 – Widget JavaScript Code Injection (Metasploit)

[local] winrar 5.80 – XML External Entity Injection

[local] Trend Micro Anti-Threat Toolkit 1.62.0.1218 – Remote Code Execution