Apple WebKit suffers from a UXSS via FrameLoader::clear.

Cross site scripting on macOS HelpViewer leads to arbitrary file execution and arbitrary file read.

Google Chrome suffers from an out-of-bounds read in layout.

Microsoft Edge and Internet Explorer suffer from a type confusion in HandleColumnBreakOnColumnSpanningElement.

Android suffers from an arbitrary class loading and instantiation in the protobuf parcelable “javanano” compiler.

38 bytes small Linux x86-64 egghunter shellcode.

WordPress Mail Masta plugin version 1.0 suffers from a remote SQL injection vulnerability.

MBLS Flex CMS version 0.7.2 suffers from remote SQL injection and cross site scripting vulnerabilities.

This Metasploit module exploits a remote command execution vulnerability in the Sophos Web Appliance versions 4.2.1.3 and below. The vulnerability exists in a section of the machine’s administrative interface for performing diagnostic network tests with wget and unsanitized user supplied information.

ProjectSend r754 suffers from authentication bypass and insecure direct object reference vulnerabilities.