Month: April 2018

[shellcode] Linux/x86 – Edit /etc/sudoers with NOPASSWD for ALL Shellcode

[dos] Adobe Flash – Out-of-Bounds Write in blur Filtering

[webapps] Ericsson-LG iPECS NMS A.1Ac – Cleartext Credential Disclosure

[webapps] WUZHI CMS 4.1.0 – Cross-Site Request Forgery

[webapps] UK Cookie Consent – Persistent Cross-Site Scripting

[dos] PRTG Network Monitor < 18.1.39.1648 – Stack Overflow (Denial of Service)

[webapps] Monstra cms 3.0.4 – Persitent Cross-Site Scripting

[webapps] Apache CouchDB 1.7.0 and 2.x before 2.1.1 – Remote Privilege Escalation

[webapps] phpMyAdmin 4.8.0 < 4.8.0-1 – Cross-Site Request Forgery

[webapps] Ncomputing vSpace Pro v10 and v11 – Directory Traversal PoC