Category: Security

[webapps] GL-AR300M-Lite 2.27 – Authenticated Command Injection / Arbitrary File Download / Directory Traversal

[dos] Google Chrome V8 JavaScript Engine 71.0.3578.98 – Out-of-Memory in Invalid Array Length

[webapps] Blueimp's jQuery File Upload 9.22.0 – Arbitrary File Upload Exploit

[dos] WebKit JSC JIT – GetIndexedPropertyStorage Use-After-Free

[dos] Spotify 1.0.96.181 – 'Proxy configuration' Denial of Service (PoC)

[dos] NTPsec 1.1.2 – 'ctl_getitem' Out-of-Bounds Read (PoC)

[local] Microsoft Windows 10 – XmlDocument Insecure Sharing Privilege Escalation

[dos] 1Password < 7.0 – Denial of Service

[local] Microsoft Windows VCF – Remote Code Execution

[shellcode] Linux/x86 – Bind (4444/TCP) Shell (/bin/sh) Shellcode (100 bytes)