Month: February 2019

[webapps] VA MAX 8.3.4 – Authenticated Remote Code Execution

[webapps] MyBB Bans List 1.0 – Cross-Site Scripting

[dos] River Past Video Cleaner 7.6.3 – Local Buffer Overflow (SEH)

[webapps] IPFire 2.21 – Cross-Site Scripting

[local] Avast Anti-Virus < 19.1.2360 – Local Credentials Disclosure

[remote] Indusoft Web Studio 8.1 SP2 – Remote Code Execution

[dos] NordVPN 6.19.6 – Denial of Service (PoC)

[remote] NUUO NVRmini – upgrade_handle.php Remote Command Execution (Metasploit)

[local] Evince – CBT File Command Injection (Metasploit)

[dos] FutureDj Pro 1.7.2.0 – Denial of Service