Tag: 0day

[webapps] FreshRSS 1.11.1 – Cross-Site Scripting

[dos] Microsoft Lync for Mac 2011 – Injection Forced Browsing/Download

[webapps] Rockwell Automation Allen-Bradley PowerMonitor 1000 – Incorrect Access Control Authentication Bypass

[local] Xorg X11 Server (AIX) – Local Privilege Escalation

[remote] OpenSSH < 7.7 – User Enumeration (2)

[shellcode] Linux/x86 – /usr/bin/head -n99 cat etc/passwd Shellcode (61 Bytes)

[webapps] Joomla! Component JE Photo Gallery 1.1 – 'categoryid' SQL Injection

[dos] Mozilla Firefox 63.0.1 – Denial of Service (PoC)

[webapps] PHP Server Monitor 3.3.1 – Cross-Site Request Forgery

[webapps] Apache Superset 0.23 – Remote Code Execution