Month: December 2018

[webapps] Rockwell Automation Allen-Bradley PowerMonitor 1000 – Incorrect Access Control Authentication Bypass

[webapps] Dolibarr ERP/CRM 8.0.3 – Cross-Site Scripting

[local] Xorg X11 Server (AIX) – Local Privilege Escalation

[remote] HP Intelligent Management – Java Deserialization RCE (Metasploit)

[dos] Wireshark – 'find_signature' Heap Out-of-Bounds Read

[dos] Wireshark – 'cdma2k_message_ACTIVE_SET_RECORD_FIELDS' Stack Corruption

[webapps] NUUO NVRMini2 3.9.1 – Authenticated Command Injection

[webapps] DomainMOD 4.11.01 – Registrar Cross-Site Scripting

[webapps] DomainMOD 4.11.01 – Custom Domain Fields Cross-Site Scripting

[webapps] DomainMOD 4.11.01 – Custom SSL Fields Cross-Site Scripting