Tag: 0day

[dos] Microsoft Windows 10 BasicRender.sys – Denial of Service (PoC)

[webapps] phpMyChat-Plus 1.98 – 'pmc_username' Reflected Cross-Site Scripting

[remote] FreeSWITCH 1.10.1 – Command Execution

[webapps] Deutsche Bahn Ticket Vending Machine Local Kiosk – Privilege Escalation

[dos] FTP Navigator 8.03 – 'Custom Command' Denial of Service (SEH)

[webapps] Tautulli 2.1.9 – Cross-Site Request Forgery (ShutDown)

[webapps] Xerox AltaLink C8035 Printer – Cross-Site Request Forgery (Add Admin)

[local] AVS Audio Converter 9.1 – 'Exit folder' Buffer Overflow

[webapps] Rumpus FTP Web File Manager 8.2.9.1 – Reflected Cross-Site Scripting

[dos] macOS 10.14.6 (18G87) – Kernel Use-After-Free due to Race Condition in wait_for_namespace_event()