Linux suffers from a 4-byte information leak via an uninitialized struct field in the compat adjtimex syscall.

NodAPS version 4.0 suffers from cross site request forgery and remote SQL injection vulnerabilities.

SuperCom Online Shopping Ecommerce Cart 1 suffers from remote SQL injection, cross site request forgery, and cross site scripting vulnerabilities.

Powerlogic/Schneider Electric IONXXXX Series suffers from a cross site request forgery vulnerability.

Nanopool Claymore Dual Miner version 7.3 suffers from a remote code execution vulnerability.

Intelbras NCLOUD 300 version 1.0 suffers from an authentication bypass vulnerability.

This Metasploit module exploits a heap-out-of-bounds write in the packet_set_ring function in net/packet/af_packet.c (AF_PACKET) in the Linux kernel to execute code as root (CVE-2017-7308). The bug was initially introduced in…