Month: December 2017

[webapps] FS Facebook Clone – 'token' SQL Injection

[remote] Claymore Dual ETH + DCR/SC/LBC/PASC GPU Miner – Stack Buffer Overflow / Path Traversal

[remote] Polycom Shell HDX Series – Traceroute Command Execution (Metasploit)

[webapps] OpenEMR 5.0.0 – OS Command Injection / Cross-Site Scripting

[dos] Microsoft Windows Defender – Controlled Folder Bypass Through UNC Path

[webapps] FS IMDB Clone – 'id' SQL Injection

[webapps] Dasan Networks GPON ONT WiFi Router H640X versions 12.02-01121 / 2.77p1-1124 / 3.03p2-1146 – Unauthenticated Remote Code Execution

[local] Hashicorp vagrant-vmware-fusion 5.0.3 – Local root Privilege Escalation

[webapps] FS Makemytrip Clone – 'id' SQL Injection

[webapps] WinduCMS 3.1 – Local File Disclosure