Tag: 0day

[webapps] Part-DB 0.4 – Authentication Bypass

[webapps] waldronmatt FullCalendar-BS4-PHP-MySQL-JSON 1.21 – 'start' SQL Injection

[webapps] waldronmatt FullCalendar-BS4-PHP-MySQL-JSON 1.21 – 'description' Cross-Site Scripting

[local] JumpStart 0.6.0.0 – 'jswpbapi' Unquoted Service Path

[webapps] delpino73 Blue-Smiley-Organizer 1.32 – 'datetime' SQL Injection

[local] ChaosPro 2.0 – Buffer Overflow (SEH)

[dos] WebKit – Universal XSS in HTMLFrameElementBase::isURLAllowed

[webapps] ClonOs WEB UI 19.09 – Improper Access Control

[local] Linux Polkit – pkexec helper PTRACE_TRACEME local root (Metasploit)

[webapps] WordPress Sliced Invoices 3.8.2 – 'post' SQL Injection