>> TAG: #0day

RSVP Invitation Online 1.0 – Cross-Site Request Forgery (Update Admin)

Flexible Poll 1.2 – SQL Injection

Oracle JDeveloper 11.1.x/12.x – Directory Traversal

Metasploit Pivoting

PHPFreeChat 1.7 – Denial of Service

CentOS Web Panel 0.9.8.12 – Multiple Vulnerabilities

Shopware 5.2.5/5.3 – Cross-Site Scripting

Metasploit Pivoting

macOS 10.13 (17A365) – Kernel Memory Disclosure due to Lack of Bounds Checking in ‘AppleIntelCapriController::getDisplayPipeCapability’

Primefaces 5.x – Remote Code Execution (Metasploit)