>> TAG: #remote exploit

Sar2HTML 3.2.1 – Remote Command Execution

Rest – Cafe and Restaurant Website CMS – ‘slug’ SQL Injection

1CRM On-Premise Software 8.5.7 – Persistent Cross-Site Scripting

Ultimate Loan Manager 2.0 – Cross-Site Scripting

WebIncorp ERP – SQL injection

Oracle Hyperion Planning 11.1.2.3 – XML External Entity

Amcrest Cameras 2.520.AC00.18.R – Unauthenticated Audio Streaming

macOS / iOS NSKeyedUnarchiver – Use-After-Free of ObjC Objects when Unarchiving OITSUIntDictionary Instances

iMessage – Memory Corruption when Decoding NSKnownKeysDictionary1

iMessage – NSKeyedUnarchiver Deserialization Allows file Backed NSData Objects