>> TAG: #0day

Joomla! Component AMGallery 1.2.3 – ‘filter_category_id’ SQL Injection

Termite 3.4 – Denial of Service (PoC)

WebRTC – FEC Out-of-Bounds Read

WebRTC – VP9 Processing Use-After-Free

Collectric CMU 1.0 – ‘lang’ SQL injection

Linux/x86 – Egghunter + sigaction-based Shellcode (27 bytes)

NICO-FTP 3.0.1.19 – Buffer Overflow (SEH)

Microsoft Windows – Double Dereference in NtEnumerateKey Elevation of Privilege

Roundcube rcfilters plugin 2.1.6 – Cross-Site Scripting

Microsoft Windows – ‘CiSetFileCache’ WDAC Security Feature Bypass TOCTOU