2018-11-17

CVE-2018-19333 Nov 17, 17:29 CRITICAL POC PATCH Act Now

pkg/sentry/kernel/shm/shm.go in Google gVisor before 2018-11-01 allows attackers to overwrite memory locations in processes running as root (but not escape the sandbox) via vectors involving IPC_RMID. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

CVE-2018-19328 Nov 17, 15:29 CRITICAL POC Act Now

LAOBANCMS 2.0 allows install/mysql_hy.php?riqi=../ Directory Traversal. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.