>> ARCHIVE: 2018-09

Microsoft Edge Chakra – ‘PathTypeHandlerBase::SetAttributesHelper’ Type Confusion

Solaris – libnspr NSPR_LOG_FILE Privilege Escalation (Metasploit)

[Persian] Android Application Penetration Testing

Bulk SQL Injection using Burp-to-SQLMap

NUUO NVRMini2 3.8 – ‘cgi_system’ Buffer Overflow (Enable Telnet)

Linux/ARM – Jump Back Shellcode + execve(“/bin/sh”, NULL, NULL) Shellcode (4 Bytes)

CA Release Automation NiMi 6.5 – Remote Command Execution

Oracle VirtualBox Manager 5.2.18 r124319 – ‘Name Attribute’ Denial of Service (PoC)

Joomla Component JCK Editor 6.4.4 – ‘parent’ SQL Injection