Tag: 0day

[webapps] Subrion 4.2.1 – 'Email' Persistant Cross-Site Scripting

[webapps] IBM Bigfix Platform 9.5.9.62 – Arbitrary File Upload

[remote] freeFTP 1.0.8 – Remote Buffer Overflow

[webapps] LabCollector 5.423 – SQL Injection

[webapps] mintinstall 7.9.9 – Code Execution

[webapps] AnchorCMS < 0.12.3a – Information Disclosure

[webapps] PHP 7.0 < 7.3 – 'gc' Disable Functions Bypass

[webapps] Detrix EDMS 1.2.3.1505 – SQL Injection

[remote] DOUBLEPULSAR – Payload Execution and Neutralization (Metasploit)

[dos] WebKit – User-agent Shadow root Leak in WebCore::ReplacementFragment::ReplacementFragment