Tag: 0day

[local] Linux Kernel 4.13 (Ubuntu 17.10) – 'waitid()' SMEP/SMAP Privilege Escalation

[dos] Avaya OfficeScan (IPO) < 10.1 – ActiveX Buffer Overflow

[remote] Avaya OfficeScan (IPO) < 10.1 – 'SoftConsole' Buffer Overflow (SEH)

[remote] Actiontec C1000A Modem – Backdoor Account

[webapps] WordPress Plugin Userpro < 4.9.17.1 – Authentication Bypass

[dos] GraphicsMagick – Memory Disclosure / Heap Overflow

[remote] tnftp – 'savefile' Arbitrary Command Execution (Metasploit)

[webapps] WordPress Plugin JTRT Responsive Tables 4.1 – SQL Injection

[webapps] Ladon Framework for Python 0.9.40 – XML External Entity Expansion

[webapps] OctoberCMS 1.0.426 (Build 426) – Cross-Site Request Forgery