>> ARCHIVE: 2016-10

Analysis of Tuleap versions 8.18 and below remote SQL injection, cross site scripting, and insecure direct object reference vulnerabilities.

LanSpy version 2.0.0.155 local buffer overflow exploit.

An attacker can send a special request to the SAP Adaptive Server Enterprise and crash the server. Version 16 is affected.

SAP EP-RUNTIME version 7.5 suffers from a denial of service vulnerability.

SAP NetWeaver KERNEL versions 7.0 through 7.5 suffer from a buffer overflow vulnerability.

Pluck CMS version 4.7.3 suffers from an add-page cross site request forgery vulnerability.

This Metasploit module exploits a vulnerability in the OpenNMS Java object which allows an unauthenticated attacker to run arbitrary code against the system.

This Metasploit module exploits a login/csrf check bypass vulnerability on WiFi Pineapples versions 2.0 and below and pineapple versions prior to 2.4. These devices may typically be identified by their…

This Metasploit module exploits a command injection vulnerability on WiFi Pineapples versions 2.0 and below and pineapple versions prior to 2.4. We use a combination of default credentials with a…