>> TAG: #0day

WordPress Plugin Wechat Broadcast 1.2.0 – Local File Inclusion

Linux/ARM – Jump Back Shellcode + execve(“/bin/sh”, NULL, NULL) Shellcode (4 Bytes)

NUUO NVRMini2 3.8 – ‘cgi_system’ Buffer Overflow (Enable Telnet)

Bulk SQL Injection using Burp-to-SQLMap

[Persian] Android Application Penetration Testing

Solaris – libnspr NSPR_LOG_FILE Privilege Escalation (Metasploit)

Microsoft Edge Chakra – ‘PathTypeHandlerBase::SetAttributesHelper’ Type Confusion

Microsoft Edge Chakra JIT – ‘localeCompare’ Type Confusion

Ubisoft Uplay Desktop Client 63.0.5699.0 – Remote Code Execution

XAMPP Control Panel 3.2.2 – Denial of Service (PoC)