Tag: 0day

[webapps] Sahi pro 7.x/8.x – Directory Traversal

[webapps] Sahi pro 8.x – SQL Injection

[webapps] Sahi pro 8.x – Cross-Site Scripting

[shellcode] Linux/x86_64 – execve(/bin/sh) Shellcode (22 bytes)

[local] Serv-U FTP Server < 15.1.7 – Local Privilege Escalation

[remote] AROX School-ERP Pro – Unauthenticated Remote Command Execution (Metasploit)

[webapps] Spring Security OAuth – Open Redirector

[dos] Thunderbird ESR < 60.7.XXX – Type Confusion

[dos] Thunderbird ESR < 60.7.XXX – 'icalmemorystrdupanddequote' Heap-Based Buffer Overflow

[dos] Thunderbird ESR < 60.7.XXX – 'parser_get_next_char' Heap-Based Buffer Overflow