Category: Security

[webapps] Express Invoice 7.12 – 'Customer' Persistent Cross-Site Scripting

[local] National Instruments Circuit Design Suite 14.0 – Local Privilege Escalation

[webapps] Intelbras Router WRN150 1.0.18 – Persistent Cross-Site Scripting

[webapps] WordPress Arforms 3.7.1 – Directory Traversal

[local] ASX to MP3 converter 3.1.3.7 – '.asx' Local Stack Overflow (Metasploit, DEP Bypass)

[dos] Windows Kernel – win32k.sys TTF Font Processing Pool Corruption in win32k!ulClearTypeFilter

[webapps] TP-Link TL-WR1043ND 2 – Authentication Bypass

[dos] Windows Kernel – NULL Pointer Dereference in nt!MiOffsetToProtos While Parsing Malformed PE File

[dos] Windows Kernel – Out-of-Bounds Read in CI!CipFixImageType While Parsing Malformed PE File

[dos] Windows Kernel – Out-of-Bounds Read in nt!MiParseImageLoadConfig While Parsing Malformed PE File