>> TAG: #remote exploit

Aptana Jaxer 1.0.3.4547 – Local File inclusion

Baldr Botnet Panel – Arbitrary Code Execution (Metasploit)

Joomla! Component JS Support Ticket (component com_jssupportticket) 1.1.5 – Arbitrary File Download

Open-School 3.0 / Community Edition 2.3 – Cross-Site Scripting

Adive Framework 2.0.7 – Cross-Site Request Forgery

Joomla! Component JS Support Ticket (component com_jssupportticket) 1.1.5 – SQL Injection

WordPress Plugin JoomSport 3.3 – SQL Injection

Google Chrome 74.0.3729.0 / 76.0.3789.0 – Heap Use-After-Free in blink::PresentationAvailabilityState::UpdateAvailability

macOS iMessage – Heap Overflow when Deserializing

Apache Tika 1.15 – 1.17 – Header Command Injection (Metasploit)