>> TAG: #0day

Subrion 4.2.1 – ‘Email’ Persistant Cross-Site Scripting

IBM Bigfix Platform 9.5.9.62 – Arbitrary File Upload

freeFTP 1.0.8 – Remote Buffer Overflow

LabCollector 5.423 – SQL Injection

mintinstall 7.9.9 – Code Execution

AnchorCMS < 0.12.3a – Information Disclosure

PHP 7.0 < 7.3 – 'gc' Disable Functions Bypass

Detrix EDMS 1.2.3.1505 – SQL Injection

DOUBLEPULSAR – Payload Execution and Neutralization (Metasploit)

WebKit – User-agent Shadow root Leak in WebCore::ReplacementFragment::ReplacementFragment