*const c_void / ExternalPointer unsoundness leading to use-after-free

Summary Use of inherently unsafe const cvoid and ExternalPointer leads to use-after-free access of the underlying structure, resulting in arbitrary code execution. Details const cvoid and ExternalPointer defined via external! macros types are used to represent v8::External wrapping arbitrary void...

WordPress File Manager Plugin < 6.9 Arbitrary File Upload

We noticed multiple cases where WordPress sites were breached using 0-day in wp-file-manager confirmed with v6.8, which was the latest version available in wordpress.org. File lib/php/connector.minimal.php can be by default opened directly, and this file loads lib/php/elFinderConnector.class.php...

mod_jk2 v2.0.2 for Apache 2.0 Remote Buffer Overflow Exploit (win32)

Exploit for unknown platform in category remote exploits ==================================================================== modjk2 v2.0.2 for Apache 2.0 Remote Buffer Overflow Exploit win32 ==================================================================== / Dreatica-FXP crew...