>> TAG: #0day

WordPress CherryFramework Themes 3.1.4 – Backup File Download

Ticketly 1.0 – ‘name’ SQL Injection

WebOfisi E-Ticaret V4 – ‘urun’ SQL Injection

MacOS 10.13 – ‘workq_kernreturn’ Denial of Service (PoC)

Ticketly 1.0 – Cross-Site Request Forgery (Add Admin)

Microsoft Windows – DfMarshal Unsafe Unmarshaling Privilege Escalation

HTML Video Player 1.2.5 – Buffer-Overflow (SEH)

XMPlay 3.8.3 – ‘.m3u’ Denial of Service (PoC)

Warranty Tracking System 11.06.3 – ‘txtCustomerCode’ SQL Injection

Helpdezk 1.1.1 – Arbitrary File Upload