Month: September 2015

[webapps] – Kirby CMS <= 2.1.0 – Authentication Bypass

[webapps] – SAP Netweaver < 7.01 – XML External Entity Injection

[webapps] – h5ai < 0.25.0 – Unrestricted File Upload

[dos] – OS X Regex Engine (TRE) – Integer Signedness and Overflow Issues

[dos] – OS X Regex Engine (TRE) – Stack Buffer Overflow

[webapps] – Air Drive Plus 2.4 – Arbitrary File Upload Vulnerability

[remote] – Konica Minolta FTP Utility 1.0 – Remote Command Execution

[remote] – Konica Minolta FTP Utility 1.00 Post Auth CWD Command SEH Overflow