Month: August 2018

[webapps] PageResponse FB Inboxer Add-on 1.2 – 'search_field' SQL Injection

[local] SecureSphere 12.0.0.50 – SealMode Shell Escape (Metasploit)

[local] Sun Solaris 11.3 AVS – Local Kernel root Exploit

[webapps] Universal Media Server 7.1.0 – SSDP Processing XML External Entity Injection

[local] Imperva SecureSphere 11.5 / 12.0 / 13.0 – Privilege Escalation

[webapps] TI Online Examination System v2 – Arbitrary File Download

[papers] [Hebrew] Digital Whisper Security Magazine #97