>> TAG: #0day

Backup Key Recovery 2.2.4 – Denial of Service (PoC)

JioFi 4G M2S 1.0.2 – ‘mask’ Cross-Site Scripting

JioFi 4G M2S 1.0.2 – Denial of Service

osTicket 1.11 – Cross-Site Scripting / Local File Inclusion

AnMing MP3 CD Burner 2.0 – Denial of Service (PoC)

Lavavo CD Ripper 4.20 – ‘License Activation Name’ Buffer Overflow (SEH)

RARLAB WinRAR 5.61 – ACE Format Input Validation Remote Code Execution (Metasploit)

VirtualBox 6.0.4 r128413 – COM RPC Interface Code Injection Host Privilege Escalation

Google Chrome 72.0.3626.121 / 74.0.3725.0 – ‘NewFixedDoubleArray’ Integer Overflow

Linux/x86 – Rabbit Shellcode Crypter (200 bytes)