Month: September 2018

[dos] Microsoft Edge Chakra – 'PathTypeHandlerBase::SetAttributesHelper' Type Confusion

[local] Solaris – libnspr NSPR_LOG_FILE Privilege Escalation (Metasploit)

[papers] [Persian] Android Application Penetration Testing

[papers] Bulk SQL Injection using Burp-to-SQLMap

[remote] NUUO NVRMini2 3.8 – 'cgi_system' Buffer Overflow (Enable Telnet)

[shellcode] Linux/ARM – Jump Back Shellcode + execve("/bin/sh", NULL, NULL) Shellcode (4 Bytes)

[remote] CA Release Automation NiMi 6.5 – Remote Command Execution

[dos] Oracle VirtualBox Manager 5.2.18 r124319 – 'Name Attribute' Denial of Service (PoC)

[webapps] Joomla Component JCK Editor 6.4.4 – 'parent' SQL Injection