Month: December 2018

[dos] SmartFTP Client 9.0.2623.0 – Denial of Service (PoC)

[webapps] DomainMOD 4.11.01 – Cross-Site Scripting

[shellcode] Linux/x86 – execve(/usr/bin/ncat -lvp 1337 -e /bin/bash)+Null-Free Shellcode (95 bytes)

[webapps] PrinterOn Enterprise 4.1.4 – Arbitrary File Deletion

[webapps] Adobe ColdFusion 2018 – Arbitrary File Upload

[webapps] ThinkPHP 5.0.23/5.1.31 – Remote Code Execution

[webapps] WordPress Plugin AutoSuggest 0.24 – 'wpas_keys' SQL Injection

[webapps] HotelDruid 2.3.0 – 'id_utente_mod' SQL Injection

[webapps] Apache OFBiz 16.11.05 – Cross-Site Scripting

[local] XNU – POSIX Shared Memory Mappings have Incorrect Maximum Protection