Category: Security

[dos] systemd – DynamicUser can Create setuid Binaries when Assisted by Another Process

[dos] HeidiSQL 10.1.0.5464 – Denial of Service (PoC)

[dos] Backup Key Recovery 2.2.4 – Denial of Service (PoC)

[webapps] JioFi 4G M2S 1.0.2 – 'mask' Cross-Site Scripting

[dos] JioFi 4G M2S 1.0.2 – Denial of Service

[webapps] osTicket 1.11 – Cross-Site Scripting / Local File Inclusion

[dos] AnMing MP3 CD Burner 2.0 – Denial of Service (PoC)

[local] Lavavo CD Ripper 4.20 – 'License Activation Name' Buffer Overflow (SEH)

[local] RARLAB WinRAR 5.61 – ACE Format Input Validation Remote Code Execution (Metasploit)

[local] VirtualBox 6.0.4 r128413 – COM RPC Interface Code Injection Host Privilege Escalation