>> ARCHIVE: 2018-10

Exim version 4.90 remote code execution exploit.

SG ERP version 1.0 suffers from a remote SQL injection vulnerability.

Microsoft Data Sharing local privilege escalation proof of concept exploit.

Axioscloud Sissiweb Registro Elettronico version 7.0.0 suffers from a cross site scripting vulnerability.

Fifa Master XLS version 2.3.2 suffers from a remote SQL injection vulnerability.

AudioCodes 440HD / 450HD IP Phone versions 3.1.2.89 and below suffer from a man-in-the-middle vulnerability.

Polycom VVX 500 / VVX 601 versions 5.8.0.12848 and below suffer from a man-in-the-middle vulnerability.

Polycom VVX 500 / VVX 601 versions 5.8.0.12848 and below suffer from an information exposure vulnerability.

This Metasploit module exploits a flaw in the ‘webexservice’ Windows service, which runs as SYSTEM, can be used to run arbitrary commands locally, and can be started by limited users…

This Metasploit module uses a valid username and password of any level (or password hash) to execute an arbitrary payload. This Metasploit module is similar to the “psexec” module, except…