>> TAG: #0day

SOCA Access Control System 180612 – Cross-Site Request Forgery (Add Admin)

XOOPS 2.5.9 – SQL Injection

Google Chrome V8 – Turbofan JSCallReducer::ReduceArrayIndexOfIncludes Out-of-Bounds Read/Write

OpenProject 5.0.0 – 8.3.1 – SQL Injection

Linux/x86 – /sbin/iptables -F Shellcode (43 bytes)

SOCA Access Control System 180612 – SQL Injection

jetCast Server 2.0 – Denial of Service (PoC)

RICOH SP 4520DN Printer – HTML Injection

SpotIM 2.2 – Denial of Service (PoC)

TheHive Project Cortex < 1.15.2 – Server-Side Request Forgery