>> TAG: #0day

Fork CMS 5.4.0 – Cross-Site Scripting

PCProtect 4.8.35 – Privilege Escalation

iWay Data Quality Suite Web Console 10.6.1.ga – XML External Entity Injection

EE 4GEE Mini EE40_00_02.00_44 – Privilege Escalation

Rausoft ID.prove 2.95 – ‘Username’ SQL injection

ManageEngine Desktop Central 10.0.271 – Cross-Site Scripting

TransMac 12.2 – Denial of Service (PoC)

CrossFont 7.5 – Denial of Service (PoC)

Linux/ARM – Bind (0.0.0.0:4444/TCP) Shell (/bin/sh) + Null-Free Shellcode (92 Bytes)

Linux – VMA Use-After-Free via Buggy vmacache_flush_all() Fastpath