Month: September 2016

[local] – AnyDesk 2.5.0 – Unquoted Service Path Privilege Escalation

[webapps] – Microix Timesheet Module – SQL Injection

[local] – Kerberos in Microsoft Windows – Security Feature Bypass (MS16-101)

[webapps] – Joomla Component Huge-IT Video Gallery 1.0.9 – SQL Injection

[papers] – [Turkish] Network Penetration Testing 101

[remote] – Metasploit Web UI – Diagnostic Console Command Execution

[dos] – Microsoft Office PowerPoint 2010 – Invalid Pointer Reference

[dos] – Symantec rar Decomposer Engine (Multiple Products) – Out-of-Bounds Read / Out-of-Bounds Write

[remote] – Kaltura 11.1.0-2 – Remote Code Execution (Metasploit)