>> TAG: #0day

Linux Kernel 4.13 (Ubuntu 17.10) – ‘waitid()’ SMEP/SMAP Privilege Escalation

Avaya OfficeScan (IPO) < 10.1 – ActiveX Buffer Overflow

Avaya OfficeScan (IPO) < 10.1 – 'SoftConsole' Buffer Overflow (SEH)

Actiontec C1000A Modem – Backdoor Account

WordPress Plugin Userpro < 4.9.17.1 – Authentication Bypass

GraphicsMagick – Memory Disclosure / Heap Overflow

tnftp – ‘savefile’ Arbitrary Command Execution (Metasploit)

WordPress Plugin JTRT Responsive Tables 4.1 – SQL Injection

Ladon Framework for Python 0.9.40 – XML External Entity Expansion

OctoberCMS 1.0.426 (Build 426) – Cross-Site Request Forgery