Tag: 0day

[webapps] Fork CMS 5.4.0 – Cross-Site Scripting

[local] PCProtect 4.8.35 – Privilege Escalation

[webapps] iWay Data Quality Suite Web Console 10.6.1.ga – XML External Entity Injection

[local] EE 4GEE Mini EE40_00_02.00_44 – Privilege Escalation

[webapps] Rausoft ID.prove 2.95 – 'Username' SQL injection

[webapps] ManageEngine Desktop Central 10.0.271 – Cross-Site Scripting

[dos] TransMac 12.2 – Denial of Service (PoC)

[dos] CrossFont 7.5 – Denial of Service (PoC)

[shellcode] Linux/ARM – Bind (0.0.0.0:4444/TCP) Shell (/bin/sh) + Null-Free Shellcode (92 Bytes)

[local] Linux – VMA Use-After-Free via Buggy vmacache_flush_all() Fastpath