>> TAG: #0day

Oracle WebCenter FatWire Content Server < 7 – Improper Access Control

Skia and Firefox – Integer Overflow in SkTDArray Leading to Out-of-Bounds Write

SAP Internet Transaction Server 6200.x – Session Fixation / Cross-Site Scripting

Microsoft Edge Chakra – Cross Context Use-After-Free

Deserialization Vulnerability

MyBB Moderator Log Notes Plugin 1.1 – Cross-Site Scripting

D-Link DSL-2750B – OS Command Injection (Metasploit)

Linux/x86 – Reverse (10.10.2.4:4444/TCP) Shell Shellcode (68 bytes)

Linux/x86 – Reverse (10.0.7.17:4444/TCP) Shell (/bin/sh) Shellcode (101 Bytes)

PaulNews 1.0 – ‘keyword’ SQL Injection / Cross-Site Scripting