>> TAG: #0day

Microsoft Windows 10 BasicRender.sys – Denial of Service (PoC)

phpMyChat-Plus 1.98 – ‘pmc_username’ Reflected Cross-Site Scripting

FreeSWITCH 1.10.1 – Command Execution

Deutsche Bahn Ticket Vending Machine Local Kiosk – Privilege Escalation

FTP Navigator 8.03 – ‘Custom Command’ Denial of Service (SEH)

Tautulli 2.1.9 – Cross-Site Request Forgery (ShutDown)

Xerox AltaLink C8035 Printer – Cross-Site Request Forgery (Add Admin)

AVS Audio Converter 9.1 – ‘Exit folder’ Buffer Overflow

Rumpus FTP Web File Manager 8.2.9.1 – Reflected Cross-Site Scripting

macOS 10.14.6 (18G87) – Kernel Use-After-Free due to Race Condition in wait_for_namespace_event()