Month: March 2018

[webapps] ClipBucket < 4.0.0 – Release 4902 – Command Injection / File Upload / SQL Injection

[dos] Memcached – 'memcrashed' Denial of Service

[local] Xion 1.0.125 – '.m3u' Local SEH-Based Unicode Venetian Exploit

[remote] NETGEAR – 'TelnetEnable' Magic Packet (Metasploit)

[local] Sophos UTM 9.410 – 'loginuser' 'confd' Service Privilege Escalation

[local] Dup Scout Enterprise 10.5.12 – 'Share Username' Local Buffer Overflow

[papers] Sony Playstation 4 (PS4) – WebKit 'setAttributeNodeNS' User After Free Write-up

[remote] TestLink Open Source Test Management < 1.9.16 – Remote Code Execution