Packet Storm

Debian Linux Security Advisory 5381-1 - Several security vulnerabilities have been discovered in the Tomcat servlet and JSP engine.

Debian Linux Security Advisory 5382-1 - It was reported that cairosvg, a SVG converter based on Cairo, can send requests to external hosts when processing specially crafted SVG files with external file resource loading. An attacker can take advantage of this flaw to perform a server-side request forgery or denial of service. Fetching of external files is disabled by default with this update.

Universal Media Server version 13.2.1 suffers from a cross site scripting vulnerability.

BulletProof FTP Server version 2019.0.0.51 suffers from a denial of service vulnerability.

Microsoft Excel suffers from a spoofing vulnerability.

Mitel MiCollab AWV versions 8.1.2.4 and 9.1.3 suffers from a directory traversal and local file inclusion vulnerabilities.

Unified Remote version 3.13.0 suffers from a remote code execution vulnerability.

HospitalRun version 1.0.0-beta local root exploit for macOS.

WIMAX SWC-5100W suffers from an authenticated remote command execution vulnerability.

71 bytes small Linux/x86_64 bash shellcode with XOR encoding.