>> TAG: #0day

Worpress Plugin Service Finder Booking < 3.2 – Local File Disclosure

WordPress Plugin WordPress Download Manager 2.9.60 – Cross-Site Request Forgery

Joomla! Component Easydiscuss < 4.0.21 – Cross-Site Scripting

Parity Browser < 1.6.10 – Bypass Same Origin Policy

Linux/x86 – execve(/bin/sh) Polymorphic Shellcode (53 bytes)

Jungo WinDriver 12.5.1 – Local Privilege Escalation

Microsoft Edge Chakra JIT – ‘Lowerer::LowerSetConcatStrMultiItem’ Missing Integer Overflow Check

HPE iMC – dbman RestartDB Unauthenticated Remote Command Execution (Metasploit)

Jungo Windriver 12.5.1 – Privilege Escalation

D-Link Routers 110/412/615/815 < 1.03 – 'service.cgi' Arbitrary Code Execution