Month: October 2018

[webapps] Wikidforum 2.20 – 'message_id' SQL Injection

[remote] Delta Electronics Delta Industrial Automation COMMGR 1.08 – Stack Buffer Overflow (Metasploit)

[papers] LOKIDN: a new vector for Homograph Attacks

[dos] Linux – Kernel Pointer Leak via BPF

[local] Zahir Enterprise Plus 6 – Stack Buffer Overflow (Metasploit)

[remote] Unitrends UEB – HTTP API Remote Code Execution (Metasploit)

[remote] Navigate CMS – Unauthenticated Remote Code Execution (Metasploit)

[dos] Android – sdcardfs Changes current->fs Without Proper Locking

[papers] WordPress Penetration Testing using WPScan and MetaSploit

[webapps] Imperva SecureSphere 13 – Remote Command Execution