Tag: 0day

[local] Microsoft Internet Explorer 8/11 and WPAD service 'Jscript.dll' – Use-After-Free

[local] Firefox 72 IonMonkey – JIT Type Confusion

[local] Splinterware System Scheduler Professional 5.30 – Unquoted Service Path

[webapps] Chevereto 3.17.1 – Cross Site Scripting (Stored)

[local] Odoo 12.0.20190101 – 'nssm.exe' Unquoted Service Path

[webapps] Human Resource Information System 0.1 – 'First Name' Persistent Cross-Site Scripting (Authenticated)

[local] DHCP Broadband 4.1.0.1503 – 'dhcpt.exe' Unquoted Service Path

[local] BOOTP Turbo 2.0.0.1253 – 'bootpt.exe' Unquoted Service Path

[local] TFTP Broadband 4.3.0.1465 – 'tftpt.exe' Unquoted Service Path

[webapps] PHP Timeclock 1.04 – 'Multiple' Cross Site Scripting (XSS)