>> TAG: #0day

FortiGate FortiOS < 6.0.3 – LDAP Credential Disclosure

ShoreTel / Mitel Connect ONSITE 19.49.5200.0 – Remote Code Execution

doorGets CMS 7.0 – Arbitrary File Download

NTPsec 1.1.2 – ‘ntp_control’ Out-of-Bounds Read (PoC)

Microsoft Windows 10 – ‘RestrictedErrorInfo’ Unmarshal Section Handle Use-After-Free

NTPsec 1.1.2 – ‘config’ Authenticated Out-of-Bounds Write Denial of Service (PoC)

NTPsec 1.1.2 – ‘ntp_control’ Authenticated NULL Pointer Dereference (PoC)

Coship Wireless Router 4.0.0.48 / 4.0.0.40 / 5.0.0.54 / 5.0.0.55 / 10.0.0.49 – Unauthenticated Admin Password Reset

GL-AR300M-Lite 2.27 – Authenticated Command Injection / Arbitrary File Download / Directory Traversal

Google Chrome V8 JavaScript Engine 71.0.3578.98 – Out-of-Memory in Invalid Array Length