>> TAG: #0day

Exploiting CVE-2014-4113 on Windows 8.1

Drupal < 7.32 Pre Auth SQL Injection

Konke Smart Plug K – Authentication Bypass Vulnerability

IBM Tivoli Monitoring 6.2.2 kbbacf1 – Privilege Escalation

MAARCH 1.4 – Arbitrary File Upload

CUPS Filter Bash Environment Variable Code Injection

MAARCH 1.4 – SQL Injection

Linux/x86-64 – Add Map (127.1.1.1 google.lk) In /etc/hosts Shellcode (110 bytes)

Enalean Tuleap 7.2 – XXE File Disclosure

Windows TrackPopupMenu Win32k NULL Pointer Dereference