Tag: 0day

[webapps] thrsrossi Millhouse-Project 1.414 – 'content' Persistent Cross-Site Scripting

[dos] WebKit – Universal XSS in JSObject::putInlineSlow and JSValue::putToPrimitive

[dos] macOS XNU – Missing Locking in checkdirs_callback() Enables Race with fchdir_common()

[local] Blue Stacks App Player 2.4.44.62.57 – "BstHdLogRotatorSvc" Unquote Service Path

[local] Aida64 6.10.5200 – Buffer Overflow (SEH)

[local] OpenVPN Connect 3.0.0.272 – 'agent_ovpnconnect' Unquoted Service Path

[remote] Ayukov NFTP client 1.71 – 'SYST' Buffer Overflow

[local] Launch Manager 6.1.7600.16385 – 'DsiWMIService' Unquoted Service Path

[dos] Apple macOS 10.15.1 – Denial of Service (PoC)

[local] Micro Focus (HPE) Data Protector – SUID Privilege Escalation (Metasploit)