>> TAG: #0day

WSTMart 2.0.8 – Cross-Site Request Forgery (Add Admin)

FrontAccounting 2.4.5 – ‘SubmitUser’ SQL Injection

Angry IP Scanner for Linux 3.5.3 – Denial of Service (PoC)

AnyBurn 4.3 – Local Buffer Overflow (SEH)

Microsoft Edge 42.17134.1.0 – ‘Tree::ANode::DocumentLayout’ Denial of Service

ZeusCart 4.0 – Cross-Site Request Forgery (Deactivate Customer Accounts)

LanSpy 2.0.1.159 – Buffer Overflow (SEH) (Egghunter)

An Internal Pentest Audit Against Active Directory

VBScript – MSXML Execution Policy Bypass

Linux Kernel 4.4 – ‘rtnetlink’ Stack Memory Disclosure