Tag: 0day

[dos] Microsoft DirectWrite / AFDKO – Stack Corruption in OpenType Font Handling Due to Incorrect Handling of blendArray

[dos] Microsoft DirectWrite / AFDKO – Heap-Based Buffer Overflow in OpenType Font Handling in readFDSelect

[dos] Firefox 67.0.4 – Denial of Service

[webapps] Karenderia Multiple Restaurant System 5.3 – SQL Injection

[webapps] WordPress Plugin Like Button 1.6.0 – Authentication Bypass

[remote] Microsoft Exchange 2003 – base64-MIME Remote Code Execution

[webapps] Karenderia Multiple Restaurant System 5.3 – Local File Inclusion

[webapps] Symantec DLP 15.5 MP1 – Cross-Site Scripting

[local] Serv-U FTP Server – prepareinstallation Privilege Escalation (Metasploit)

[local] Mac OS X TimeMachine – 'tmdiagnose' Command Injection Privilege Escalation (Metasploit)