CuteNews version 2.1.2 remote code execution exploit.

Tiandy IPC and NVR version 9.12.7 suffer from a credential disclosure vulnerability.

The ZTE F602W router suffers from a CAPTCHA bypass vulnerability.

Mobile Shop System version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass.

Gnome Fonts Viewer version 3.34.0 suffers from a heap corruption vulnerability.

Microsoft Internet Explorer 11 use-after free exploit that triggers when Array.sort() is called with a comparator function. The two arguments are untracked by the garbage collector.

Tea LaTex version 1.0 suffers from an unauthenticated remote code execution vulnerability.

VTENEXT 19 CE suffers from a remote code execution vulnerability.

This Metasploit module exploits a feature in the DNS service of Windows Server. Users of the DnsAdmins group can set the ServerLevelPluginDll value using dnscmd.exe to create a registry key…