>> TAG: #0day

Windows Kernel – Bitmap Use-After-Free

Adobe Flash – URLStream.readObject Use-After-Free

Apache OpenMeetings 1.9.x – 3.1.0 – ZIP File path Traversal

Apache Jetspeed Arbitrary File Upload

MOBOTIX Video Security Cameras – CSRF Add Admin Exploit

Wireshark – dissect_pktc_rekey Heap-based Out-of-Bounds Read

LShell <= 0.9.15 – Remote Code Execution

Apple Quicktime < 7.7.79.80.95 – FPX File Parsing Memory Corruption 1

Metaphor – Stagefright Exploit with ASLR Bypass

ATutor 2.2.1 Directory Traversal / Remote Code Execution