>> TAG: #0day

Ross Video DashBoard 8.5.1 – Insecure Permissions

systemd – Lack of Seat Verification in PAM Module Permits Spoofing Active Session to polkit

Linux – Missing Locking in Siemens R3964 Line Discipline Race Condition

Linux – ‘page->_refcount’ Overflow via FUSE

QNAP myQNAPcloud Connect 1.3.4.0317 – ‘Username/Password’ Denial of Service

Msvod 10 – Cross-Site Request Forgery (Change User Information)

Ease Audio Converter 5.30 – ‘.mp4’ Denial of Service (PoC)

Google Chrome 73.0.3683.103 V8 JavaScript Engine – Out-of-Memory in Invalid Table Size Denial of Service (PoC)

WordPress Plugin Contact Form Builder 1.0.67 – Cross-Site Request Forgery / Local File Inclusion

Linux/ARM – Password-Protected Reverse TCP Shellcode (100 bytes)