Month: March 2019

[local] Anyburn 4.3 x86 – 'Copy disc to image file' Buffer Overflow – (UNICODE)(SEH)

[remote] QNAP TS-431 QTS < 4.2.2 – Remote Command Execution (Metasploit)

[webapps] Kados R10 GreenBee – Multiple SQL Injection

[remote] Imperva SecureSphere 13.x – 'PWS' Command Injection (Metasploit)

[dos] Android – getpidcon() Usage in Hardware binder ServiceManager Permits ACL Bypass

[dos] Linux < 4.20.14 – Virtual Address 0 is Mappable via Privileged write() to /proc/*/mem

[dos] Android – binder Use-After-Free via racy Initialization of ->allow_user_free