>> TAG: #0day

Free SMTP Server 2.5 – Denial of Service (PoC)

pfSense 2.4.4-p3 (ACME Package 0.59_14) – Persistent Cross-Site Scripting

Qualcomm Android – Kernel Use-After-Free via Incorrect set_page_dirty() in KGSL

Spidermonkey – IonMonkey Leaks JS_OPTIMIZED_OUT Magic Value to Script

Spidermonkey – IonMonkey Unexpected ObjectGroup in ObjectGroupDispatch Operation

Oracle Application Testing Suite – WebLogic Server Administration Console War Deployment (Metasploit)

EquityPandit 1.0 – Password Disclosure

Petraware pTransformer ADC < 2.1.7.22827 – Login Bypass

Phraseanet < 4.0.7 – Cross-Site Scripting

Pidgin 2.13.0 – Denial of Service (PoC)