Tag: 0day

[local] – Kerberos in Microsoft Windows – Security Feature Bypass (MS16-101)

[webapps] – Microix Timesheet Module – SQL Injection

[local] – AnyDesk 2.5.0 – Unquoted Service Path Privilege Escalation

[webapps] – Kerio Control Unified Threat Management 9.1.0 build 1087, 9.1.1 build 1324 – Multiple Vulnerabilities

[webapps] – Exponent CMS 2.3.9 – Blind SQL Injection

[remote] – Kaltura 11.1.0-2 – Remote Code Execution (Metasploit)

[dos] – Symantec rar Decomposer Engine (Multiple Products) – Out-of-Bounds Read / Out-of-Bounds Write

[dos] – Microsoft Office PowerPoint 2010 – Invalid Pointer Reference

[webapps] – VegaDNS 0.13.2 – Remote Command Injection

[webapps] – Dolphin 7.3.0 – Error-Based SQL Injection