Category: Security

[webapps] Advance Loan Management System – 'id' SQL Injection

[webapps] Fancy Clone Script – 'search_browse_product' SQL Injection

[webapps] Event Manager 1.0 – SQL Injection

[webapps] Joomla! Component JEXTN Membership 3.1.0 – 'usr_plan' SQL Injection

[webapps] Real Estate Custom Script – 'route' SQL Injection

[papers] [Hebrew] Digital Whisper Security Magazine #91

[remote] Sync Breeze Enterprise 10.4.18 – Remote Buffer Overflow (SEH)

[remote] BMC Server Automation RSCD Agent – NSH Remote Command Execution (Metasploit)

[papers] Jailbreaking iOS 11.1.2: An adventure into the XNU kernel

[dos] WebKit – 'WebCore::FrameView::clientToLayoutViewportPoint' Use-After-Free