>> TAG: #remote exploit

Meinberg LANTIME Web Configuration Utility 6.16.008 – Arbitrary File Read

glibc ld.so – Memory Leak / Buffer Overflow

Joomla! Component JEXTN Question And Answer 3.1.0 – SQL Injection

Joomla! Component JBuildozer 1.4.1 – ‘appid’ SQL Injection

Accesspress Anonymous Post Pro < 3.2.0 – Unauthenticated Arbitrary File Upload

Apple XNU Kernel – Memory Corruption due to Integer Overflow in __offsetof Usage in posix_spawn on 32-bit Platforms

macOS – Kernel Code Execution due to Lack of Bounds Checking in AppleIntelCapriController::GetLinkConfig

macOS/iOS – Kernel Double Free due to Incorrect API Usage in Flow Divert Socket Option Handling

macOS/iOS – Multiple Kernel Use-After-Frees due to Incorrect IOKit Object Lifetime Management in IOTimeSyncClockManagerUserClient

Freelance Website Script 2.0.6 – ‘pr_id’ / ‘catid’ SQL Injection