Month: December 2018

[remote] OpenSSH < 7.7 – User Enumeration (2)

[local] Xorg X11 Server (AIX) – Local Privilege Escalation

[webapps] Rockwell Automation Allen-Bradley PowerMonitor 1000 – Incorrect Access Control Authentication Bypass

[dos] Microsoft Lync for Mac 2011 – Injection Forced Browsing/Download

[webapps] FreshRSS 1.11.1 – Cross-Site Scripting

[webapps] DomainMOD 4.11.01 – Owner name Field Cross-Site Scripting

[webapps] NEC Univerge Sv9100 WebPro – 6.00 – Predictable Session ID / Clear Text Password Storage

[local] Emacs – movemail Privilege Escalation (Metasploit)

[remote] HP Intelligent Management – Java Deserialization RCE (Metasploit)

[dos] Wireshark – 'find_signature' Heap Out-of-Bounds Read