>> TAG: #0day

MikroTik 6.41.4 – FTP daemon Denial of Service PoC

Microsoft Credential Security Support Provider – Remote Code Execution

Joomla Convert Forms version 2.0.3 – Formula Injection (CSV Injection)

Linux/x64 – x64 Assembly Shellcode Generator

iScripts Easycreate 3.2.1 – Stored Cross-Site Scripting

WordPress Plugin Activity Log 2.4.0 – Stored Cross-Site Scripting

WordPress File Upload Plugin 4.3.2 – Stored Cross-Site Scripting

WUZHI CMS 4.1.0 – Cross-Site Request Forgery (Add Admin User)

Google Chrome V8 JIT – ‘LoadElimination::ReduceTransitionElementsKind’ Type Confusion

WUZHI CMS 4.1.0 – Cross-Site Request Forgery (Add User)