Tag: 0day

[webapps] Amcrest Cameras 2.520.AC00.18.R – Unauthenticated Audio Streaming

[dos] macOS / iOS NSKeyedUnarchiver – Use-After-Free of ObjC Objects when Unarchiving OITSUIntDictionary Instances

[dos] iMessage – Memory Corruption when Decoding NSKnownKeysDictionary1

[dos] iMessage – NSKeyedUnarchiver Deserialization Allows file Backed NSData Objects

[remote] Redis 4.x / 5.x – Unauthenticated Code Execution (Metasploit)

[webapps] WordPress Theme Real Estate 2.8.9 – Cross-Site Scripting

[webapps] WordPress Plugin Simple Membership < 3.8.5 – Cross-Site Request Forgery

[webapps] GigToDo 1.3 – Cross-Site Scripting

[local] Microsoft Windows 7 build 7601 (x86) – Local Privilege Escalation

[webapps] Ovidentia 8.4.3 – Cross-Site Scripting