Tag: 0day

[dos] WebKit JIT – 'ByteCodeParser::handleIntrinsicCall' Type Confusion

[dos] WebKit JSC – BytecodeGenerator::hoistSloppyModeFunctionIfNecessary Does not Invalidate the 'ForInContext' Object

[local] Unitrends Enterprise Backup – bpserverd Privilege Escalation (Metasploit)

[remote] PHP imap_open – Remote Code Execution (Metasploit)

[local] Mac OS X – libxpc MITM Privilege Escalation (Metasploit)

[remote] TeamCity Agent – XML-RPC Command Execution (Metasploit)

[dos] WebKit JSC JIT – 'JSPropertyNameEnumerator' Type Confusion

[local] Linux – Nested User Namespace idmap Limit Local Privilege Escalation (Metasploit)

[remote] Netgear Devices – Unauthenticated Remote Command Execution (Metasploit)

[webapps] Ticketly 1.0 – 'kind_id' SQL Injection