AirMore 1.6.1 – Denial of Service (PoC)
AirMore 1.6.1 – Denial of Service (PoC)
Free IP Switcher 3.1 – ‘Computer Name’ Denial of Service (PoC)
qdPM 9.1 – ‘search_by_extrafields[]’ SQL Injection
Jinja2 2.10 – ‘from_string’ Server Side Template Injection
VSCO 1.1.1.0 – Denial of Service (PoC)
Navicat for Oracle 12.1.15 – “Password” Denial of Service (PoC)
MyBB Trash Bin Plugin 1.1.3 – Cross-Site Scripting / Cross-Site Request Forgery
runc versions prior to 1.0-rc6 (Docker < 18.09.2 host command execution proof of concept exploit.
This exploit bypasses access control checks to use a restricted API function (POST /v2/create-user) of the local snapd service. This queries the Ubuntu SSO for a username and public SSH…
This exploit bypasses access control checks to use a restricted API function (POST /v2/snaps) of the local snapd service. This allows the installation of arbitrary snaps. Snaps in “devmode” bypass…