Month: February 2015

[webapps] – Hewlett-Packard UCMDB – JMX-Console Authentication Bypass

[webapps] – NPDS CMS Revolution-13 – SQL Injection Vulnerability

[webapps] – WordPress Photo Gallery Plugin 1.2.5 – Unrestricted File Upload

[dos] – Exim ESMTP 4.80 glibc gethostbyname – Denial of Service

[remote] – Symantec Encryption Management Server < 3.2.0 MP6 – Remote Command Injection

[remote] – HP Data Protector 8.x – Remote Command Execution

[local] – MS15-004 Microsoft Remote Desktop Services Web Proxy IE Sandbox Escape

[local] – Trend Micro Multiple Products 8.0.1133 – Privilege Escalation

[local] – Symantec Altiris Agent 6.9 (Build 648) – Privilege Escalation

[remote] – X360 VideoPlayer ActiveX Control 2.6 – Full ASLR & DEP Bypass