Tag: 0day

[webapps] RSVP Invitation Online 1.0 – Cross-Site Request Forgery (Update Admin)

[webapps] Flexible Poll 1.2 – SQL Injection

[webapps] Oracle JDeveloper 11.1.x/12.x – Directory Traversal

[papers] Metasploit Pivoting

[webapps] PHPFreeChat 1.7 – Denial of Service

[webapps] CentOS Web Panel 0.9.8.12 – Multiple Vulnerabilities

[webapps] Shopware 5.2.5/5.3 – Cross-Site Scripting

[papers] Metasploit Pivoting

[dos] macOS 10.13 (17A365) – Kernel Memory Disclosure due to Lack of Bounds Checking in 'AppleIntelCapriController::getDisplayPipeCapability'

[webapps] Primefaces 5.x – Remote Code Execution (Metasploit)