Tag: 0day

[webapps] Event Manager 1.0 – SQL Injection

[webapps] Joomla! Component JEXTN Membership 3.1.0 – 'usr_plan' SQL Injection

[webapps] Real Estate Custom Script – 'route' SQL Injection

[papers] [Hebrew] Digital Whisper Security Magazine #91

[remote] Sync Breeze Enterprise 10.4.18 – Remote Buffer Overflow (SEH)

[remote] BMC Server Automation RSCD Agent – NSH Remote Command Execution (Metasploit)

[papers] Jailbreaking iOS 11.1.2: An adventure into the XNU kernel

[dos] WebKit – 'WebCore::FrameView::clientToLayoutViewportPoint' Use-After-Free

[remote] HPE iMC 7.3 – RMI Java Deserialization

[webapps] Joomla! Component Visual Calendar 3.1.3 – 'id' SQL Injection