>> TAG: #0day

Crypto Wallet Local Storage Attack

Drupal < 8.6.9 – REST Module Remote Code Execution

Jenkins Plugin Script Security 1.49/Declarative 1.3.4/Groovy 2.60 – Remote Code Execution

PHP Ecommerce Script 2.0.6 – Cross-Site Scripting / SQL Injection

zzzphp CMS 1.6.1 – Remote Code Execution

News Website Script 2.0.5 – SQL Injection

Advance Gift Shop Pro Script 2.0.3 – SQL Injection

Xlight FTP Server 3.9.1 – Buffer Overflow (PoC)

Drupal < 8.6.10 / < 8.5.11 – REST Module Remote Code Execution

Protecting Windows Privilege Accounts