Month: March 2019

[webapps] XooGallery – Multiple SQL Injection

[webapps] Rukovoditel ERP & CRM 2.4.1 – 'path' Cross-Site Scripting

[papers] JMX RMI – Multiple Applications Remote Code Execution

[webapps] Jettweb Php Hazır İlan Sitesi Scripti V2 – SQL Injection

[dos] Firefox < 66.0.1 – 'Array.prototype.slice' Buffer Overflow

[webapps] Zeeways Matrimony CMS – SQL Injection

[webapps] Zeeways Jobsite CMS – 'id' SQL Injection

[local] VMware Workstation 14.1.5 / VMware Player 15 – Host VMX Process COM Class Hijack Privilege Escalation