>> TAG: #0day

iOS IOUSBDeviceFamily 12.4.1 – ‘IOInterruptEventSource’ Heap Corruption (PoC)

Jenkins build-metrics plugin 1.3 – ‘label’ Cross-Site Scripting

SolarWinds Kiwi Syslog Server 8.3.52 – ‘Kiwi Syslog Server’ Unquoted Service Path

Adive Framework 2.0.7 – Privilege Escalation

Android Janus – APK Signature Bypass (Metasploit)

rConfig – install Command Execution (Metasploit)

Nextcloud 17 – Cross-Site Request Forgery

Adaware Web Companion version 4.8.2078.3950 – ‘WCAssistantService’ Unquoted Service Path

Wacom WTabletService 6.6.7-3 – ‘WTabletServicePro’ Unquoted Service Path

QNAP NetBak Replicator 4.5.6.0607 – ‘QVssService’ Unquoted Service Path