Month: July 2016

[remote] – Barracuda Web App Firewall 8.0.1.008/Load Balancer 5.4.0.004 – Post Auth Remote Root Exploit (Metasploit) (3)

[webapps] – WordPress Ultimate Product Catalog 3.9.8 – (do_shortcode via ajax) Blind SQL Injection

[webapps] – AXIS Multiple Products – Authenticated Remote Command Execution via devtools Vector

[local] – VUPlayer 2.49 – (.pls) Stack Buffer Overflow (DEP Bypass)

[local] – mySCADAPro 7 – Local Privilege Escalation