>> ARCHIVE: 2016-10

Microsoft Visual Studio 2010 suffers from a dll hijacking vulnerability.

This Metasploit module exploits an arbitrary PHP code upload in thewordpress Ifileupload plugin, The vulnerability allows for unauthorization file upload and remote code execution.

Telegram Web version 0.5.5 allows you to set a null username due to a client-side mitigation for null bytes.

Event Calendar PHP version 1.5 suffers from a remote SQL injection vulnerability.

Event Calendar PHP version 1.5 suffers from a cross site request forgery vulnerability.

Just Dial Clone Script suffers from a remote SQL injection vulnerability.

Classifieds Rental Script suffers from a remote SQL injection vulnerability.

MiCasa VeraLite suffers from a remote code execution vulnerability.

This exploit demonstrates a race condition in the Linux kernel’s memory subsystem and how it handles the copy-on-write (COW) breakage of private read-only memory mappings.

DirtyCow local root proof of concept exploit that overwrites passwd.