This paper and proof of concept describes the Wiederganger-Attack, a new attack vector that reliably allows to escalate unbounded array access vulnerabilities occurring in specifically allocated memory regions to full…
WebKit JIT int32/double arrays can have proxy objects in the prototype chains.
Linux userfaultfd bypasses tmpfs file permissions.
PrinterOn Enterprise version 4.1.4 suffers from an arbitrary file deletion vulnerability.
LanSpy version 2.0.1.159 suffers from a local buffer overflow vulnerability.
SmartFTP Client version 9.0.2623.0 suffers from a denial of service vulnerability.
Alumni Tracer SMS version Notification suffers from cross site request forgery and remote SQL injection vulnerabilities.
Tourism Website version Blog suffers from code execution and remote SQL injection vulnerabilities.
PrestaShop versions 1.6.x and 1.7.x suffer from a remote code execution vulnerability.
TP-Link Archer C1200 suffers from a cross site scripting vulnerability.