Tag: 0day

[dos] iOS/macOS 10.13.6 – 'if_ports_used_update_wakeuuid()' 16-byte Uninitialized Kernel Stack Disclosure

[dos] IP-Tools 2.50 – Denial of Service SEH Overwrite (PoC)

[dos] Necrosoft DIG 0.4 – Denial of Service SEH Overwrite (PoC)

[dos] MiniUPnPd 2.1 – Out-of-Bounds Read

[local] HTML5 Video Player 1.2.5 – Local Buffer Overflow (Non SEH)

[shellcode] Linux/x86 – execve(/bin/sh) + RShift-1 Encoded Shellcode (29 bytes)

[webapps] PDF Signer 3.0 – Server-Side Template Injection leading to Remote Command Execution (via Cross-Site Request Forgery Cookie)

[webapps] Oracle Reports Developer Component 12.2.1.3 – Cross-site Scripting

[local] Microsoft Windows CONTACT – Remote Code Execution

[webapps] Roxy Fileman 1.4.5 – Arbitrary File Download