Tag: 0day

[webapps] Blueimp's jQuery File Upload 9.22.0 – Arbitrary File Upload Exploit

[dos] WebKit JSC JIT – GetIndexedPropertyStorage Use-After-Free

[dos] Spotify 1.0.96.181 – 'Proxy configuration' Denial of Service (PoC)

[dos] NTPsec 1.1.2 – 'ctl_getitem' Out-of-Bounds Read (PoC)

[local] Microsoft Windows 10 – XmlDocument Insecure Sharing Privilege Escalation

[dos] 1Password < 7.0 – Denial of Service

[local] Microsoft Windows VCF – Remote Code Execution

[shellcode] Linux/x86 – Bind (4444/TCP) Shell (/bin/sh) Shellcode (100 bytes)

[webapps] ownDMS 4.7 – SQL Injection

[webapps] Twilio WEB To Fax Machine System Application 1.0 – SQL Injection