>> TAG: #0day

WebKit JIT – Int32/Double Arrays can have Proxy Objects in the Prototype Chains

CyberLink LabelPrint 2.5 – Stack Buffer Overflow (Metasploit)

McAfee True Key – McAfee.TrueKey.Service Privilege Escalation

XNU – POSIX Shared Memory Mappings have Incorrect Maximum Protection

Apache OFBiz 16.11.05 – Cross-Site Scripting

HotelDruid 2.3.0 – ‘id_utente_mod’ SQL Injection

WordPress Plugin AutoSuggest 0.24 – ‘wpas_keys’ SQL Injection

ThinkPHP 5.0.23/5.1.31 – Remote Code Execution

Adobe ColdFusion 2018 – Arbitrary File Upload

PrinterOn Enterprise 4.1.4 – Arbitrary File Deletion