>> CATEGORY: Security

systemd – DynamicUser can Create setuid Binaries when Assisted by Another Process

HeidiSQL 10.1.0.5464 – Denial of Service (PoC)

Backup Key Recovery 2.2.4 – Denial of Service (PoC)

JioFi 4G M2S 1.0.2 – ‘mask’ Cross-Site Scripting

JioFi 4G M2S 1.0.2 – Denial of Service

osTicket 1.11 – Cross-Site Scripting / Local File Inclusion

AnMing MP3 CD Burner 2.0 – Denial of Service (PoC)

Lavavo CD Ripper 4.20 – ‘License Activation Name’ Buffer Overflow (SEH)

RARLAB WinRAR 5.61 – ACE Format Input Validation Remote Code Execution (Metasploit)

VirtualBox 6.0.4 r128413 – COM RPC Interface Code Injection Host Privilege Escalation