Tag: 0day

[webapps] SAP NetWeaver Web Dynpro 6.4 to 7.5 – Information disclosure

[remote] HPE iMC 7.3 – Remote Code Execution (Metasploit)

[local] Linux 4.8.0 < 4.8.0-46 – AF_PACKET packet_set_ring Privilege Escalation (Metasploit)

[webapps] SAP B2B / B2C CRM 2.x < 4.x – Local File Inclusion

[dos] Microsoft Edge Chakra JIT – Bound Check Elimination Bug

[local] Prime95 29.4b8 – Stack Buffer Overflow (SEH)

[webapps] Intelbras NCLOUD 300 1.0 – Authentication bypass

[webapps] NodAPS 4.0 – SQL injection / Cross-Site Request Forgery

[remote] Nanopool Claymore Dual Miner 7.3 – Remote Code Execution

[remote] Jenkins CLI – HTTP Java Deserialization (Metasploit)