Tag: 0day

[webapps] Webiness Inventory 2.3 – 'ProductModel' Arbitrary File Upload

[webapps] M/Monit 3.7.2 – Privilege Escalation

[webapps] ArangoDB Community Edition 3.4.2-1 – Cross-Site Scripting

[webapps] Apache CouchDB 2.3.0 – Cross-Site Scripting

[webapps] Comodo Dome Firewall 2.7.0 – Cross-Site Scripting

[dos] Oracle Java Runtime Environment – Heap Out-of-Bounds Read During OTF Font Rendering in glyph_CloseContour

[dos] Oracle Java Runtime Environment – Heap Out-of-Bounds Read During TTF Font Rendering in OpenTypeLayoutEngine::adjustGlyphPositions

[webapps] qdPM 9.1 – 'type' Cross-Site Scripting

[shellcode] macOS – execve(/bin/sh) + Null-Free Shellcode (31 bytes)

[dos] Oracle Java Runtime Environment – Heap Out-of-Bounds Read During TTF Font Rendering in AlternateSubstitutionSubtable::process