Month: December 2018

[webapps] KeyBase Botnet 1.5 – SQL Injection

[dos] Microsoft Lync for Mac 2011 – Injection Forced Browsing/Download

[local] Emacs – movemail Privilege Escalation (Metasploit)

[shellcode] Linux/x64 – Reverse (0.0.0.0:1907/TCP) Shell Shellcode (119 Bytes)

[shellcode] Linux/x86 – /usr/bin/head -n99 cat etc/passwd Shellcode (61 Bytes)

[webapps] DomainMOD 4.11.01 – Owner name Field Cross-Site Scripting

[remote] OpenSSH < 7.7 – User Enumeration (2)

[webapps] Joomla! Component JE Photo Gallery 1.1 – 'categoryid' SQL Injection

[remote] CyberArk 9.7 – Memory Disclosure

[webapps] WordPress Plugin Advanced-Custom-Fields 5.7.7 – Cross-Site Scripting