[dos] macOS / iOS JavaScriptCore - Loop-Invariant Code Motion (LICM) Leaves Object Property Access Unguarded
macOS / iOS JavaScriptCore - Loop-Invariant Code Motion (LICM) Leaves Object Property Access Unguarded
https://www.exploit-db.com/exploits/47190

[dos] iMessage - NSKeyedUnarchiver Deserialization Allows file Backed NSData Objects
iMessage - NSKeyedUnarchiver Deserialization Allows file Backed NSData Objects
https://www.exploit-db.com/exploits/47194

[dos] iMessage - Memory Corruption when Decoding NSKnownKeysDictionary1
iMessage - Memory Corruption when Decoding NSKnownKeysDictionary1
https://www.exploit-db.com/exploits/47193

[dos] iMessage - NSArray Deserialization can Invoke Subclass that does not Retain References
iMessage - NSArray Deserialization can Invoke Subclass that does not Retain References
https://www.exploit-db.com/exploits/47192

[dos] macOS / iOS NSKeyedUnarchiver - Use-After-Free of ObjC Objects when Unarchiving OITSUIntDictionary Instances
macOS / iOS NSKeyedUnarchiver - Use-After-Free of ObjC Objects when Unarchiving OITSUIntDictionary Instances
https://www.exploit-db.com/exploits/47189

[remote] Redis 4.x / 5.x - Unauthenticated Code Execution (Metasploit)
Redis 4.x / 5.x - Unauthenticated Code Execution (Metasploit)
https://www.exploit-db.com/exploits/47195

[webapps] Oracle Hyperion Planning 11.1.2.3 - XML External Entity
Oracle Hyperion Planning 11.1.2.3 - XML External Entity
https://www.exploit-db.com/exploits/47196

[webapps] WebIncorp ERP - SQL injection
WebIncorp ERP - SQL injection
https://www.exploit-db.com/exploits/47199

[webapps] Ultimate Loan Manager 2.0 - Cross-Site Scripting
Ultimate Loan Manager 2.0 - Cross-Site Scripting
https://www.exploit-db.com/exploits/47198

[webapps] Cisco Catalyst 3850 Series Device Manager - Cross-Site Request Forgery
Cisco Catalyst 3850 Series Device Manager - Cross-Site Request Forgery
https://www.exploit-db.com/exploits/47203

[webapps] Sar2HTML 3.2.1 - Remote Command Execution
Sar2HTML 3.2.1 - Remote Command Execution
https://www.exploit-db.com/exploits/47204

[webapps] 1CRM On-Premise Software 8.5.7 - Persistent Cross-Site Scripting
1CRM On-Premise Software 8.5.7 - Persistent Cross-Site Scripting
https://www.exploit-db.com/exploits/47206

[webapps] Rest - Cafe and Restaurant Website CMS - 'slug' SQL Injection
Rest - Cafe and Restaurant Website CMS - 'slug' SQL Injection
https://www.exploit-db.com/exploits/47205

[remote] Apache Tika 1.15 - 1.17 - Header Command Injection (Metasploit)
Apache Tika 1.15 - 1.17 - Header Command Injection (Metasploit)
https://www.exploit-db.com/exploits/47208

[dos] macOS iMessage - Heap Overflow when Deserializing
macOS iMessage - Heap Overflow when Deserializing
https://www.exploit-db.com/exploits/47207

[remote] ARMBot Botnet - Arbitrary Code Execution
ARMBot Botnet - Arbitrary Code Execution
https://www.exploit-db.com/exploits/47209

[webapps] WordPress Plugin JoomSport 3.3 - SQL Injection
WordPress Plugin JoomSport 3.3 - SQL Injection
https://www.exploit-db.com/exploits/47210

[dos] Google Chrome 74.0.3729.0 / 76.0.3789.0 - Heap Use-After-Free in blink::PresentationAvailabilityState::UpdateAvailability
Google Chrome 74.0.3729.0 / 76.0.3789.0 - Heap Use-After-Free in blink::PresentationAvailabilityState::UpdateAvailability
https://www.exploit-db.com/exploits/47211

[webapps] Daily Expense Manager 1.0 - Cross-Site Request Forgery (Delete Income)
Daily Expense Manager 1.0 - Cross-Site Request Forgery (Delete Income)
https://www.exploit-db.com/exploits/47213

[webapps] Open-School 3.0 / Community Edition 2.3 - Cross-Site Scripting
Open-School 3.0 / Community Edition 2.3 - Cross-Site Scripting
https://www.exploit-db.com/exploits/47212