Month: February 2015

[webapps] – WordPress Webdorado Spider Event Calendar 1.4.9 – SQL Injection

[local] – Realtek 11n Wireless LAN utility – Privilege Escalation

[webapps] – WonderPlugin Audio Player 2.0 – Blind SQL Injection and XSS

[webapps] – Beehive Forum 1.4.4 – Stored XSS Vulnerability

[remote] – PCMan FTP Server 2.0.7 – Buffer Overflow – MKD Command

[webapps] – Zabbix 2.0.5 – Cleartext ldap_bind_password Password Disclosure (MSF)

[webapps] – WeBid 1.1.1 Unrestricted File Upload Exploit

[dos] – PHP DateTime Use After Free Vulnerability

[webapps] – WordPress Easy Social Icons Plugin 1.2.2 – CSRF Vulnerability

[webapps] – Zeuscart v.4 – Multiple Vulnerabilities