Category: Security

[webapps] WordPress Plugin WPGraphQL 0.2.3 – Multiple Vulnerabilities

[webapps] Oracle CTI Web Service – 'EBS_ASSET_HISTORY_OPERATIONS' XML Entity Injection

[dos] macOS < 10.14.5 / iOS < 12.3 DFG JIT Compiler – 'HasIndexedProperty' Use-After-Free

[webapps] Brocade Network Advisor 14.4.1 – Unauthenticated Remote Code Execution

[dos] macOS < 10.14.5 / iOS < 12.3 JavaScriptCore – Loop-Invariant Code Motion (LICM) in DFG JIT Leaves Stack Variable Uninitialized

[dos] macOS < 10.14.5 / iOS < 12.3 JavaScriptCore – AIR Optimization Incorrectly Removes Assignment to Register

[dos] macOS < 10.14.5 / iOS < 12.3 XNU – Wild-read due to bad cast in stf_ioctl

[webapps] eLabFTW 1.8.5 – Arbitrary File Upload / Remote Code Execution

[dos] Huawei eSpace 1.1.11.103 – 'ContactsCtrl.dll' / 'eSpaceStatusCtrl.dll' ActiveX Heap Overflow

[dos] Encrypt PDF 2.3 – Denial of Service (PoC)