>> ARCHIVE: 2018-12

SmartFTP Client 9.0.2623.0 – Denial of Service (PoC)

DomainMOD 4.11.01 – Cross-Site Scripting

Linux/x86 – execve(/usr/bin/ncat -lvp 1337 -e /bin/bash)+Null-Free Shellcode (95 bytes)

PrinterOn Enterprise 4.1.4 – Arbitrary File Deletion

Adobe ColdFusion 2018 – Arbitrary File Upload

ThinkPHP 5.0.23/5.1.31 – Remote Code Execution

WordPress Plugin AutoSuggest 0.24 – ‘wpas_keys’ SQL Injection

HotelDruid 2.3.0 – ‘id_utente_mod’ SQL Injection

Apache OFBiz 16.11.05 – Cross-Site Scripting

XNU – POSIX Shared Memory Mappings have Incorrect Maximum Protection