>> TAG: #0day

SAP NetWeaver Web Dynpro 6.4 to 7.5 – Information disclosure

HPE iMC 7.3 – Remote Code Execution (Metasploit)

Linux 4.8.0 < 4.8.0-46 – AF_PACKET packet_set_ring Privilege Escalation (Metasploit)

SAP B2B / B2C CRM 2.x < 4.x – Local File Inclusion

Microsoft Edge Chakra JIT – Bound Check Elimination Bug

Prime95 29.4b8 – Stack Buffer Overflow (SEH)

Intelbras NCLOUD 300 1.0 – Authentication bypass

NodAPS 4.0 – SQL injection / Cross-Site Request Forgery

Nanopool Claymore Dual Miner 7.3 – Remote Code Execution

Jenkins CLI – HTTP Java Deserialization (Metasploit)