YzmCMS 5.5 – ‘url’ Persistent Cross-Site Scripting

Sysaid 20.1.11 b26 – Remote Command Execution

PHP-FPM – Underflow Remote Code Execution (Metasploit)

Apache ActiveMQ 5.x-5.11.1 – Directory Traversal Shell Upload (Metasploit)

Counter Strike: GO – ‘.bsp’ Memory Control (PoC)

Google Chrome 80 – JSCreate Side-effect Type Confusion (Metasploit)

OpenSMTPD – OOB Read Local Privilege Escalation (Metasploit)

Google Chrome 67, 68 and 69 – Object.create Type Confusion (Metasploit)

Google Chrome 72 and 73 – Array.map Out-of-Bounds Write (Metasploit)

Sentrifugo HRMS 3.2 – ‘id’ SQL Injection