Month: April 2019

[webapps] Zyxel ZyWall 310 / ZyWall 110 / USG1900 / ATP500 / USG40 – Login Page Cross-Site Scripting

[local] Zoho ManageEngine ADManager Plus 6.6 (Build < 6659) – Privilege Escalation

[local] Microsoft Windows 10 1809 – LUAFV NtSetCachedSigningLevel Device Guard Bypass

[local] Microsoft Windows 10 1809 – LUAFV LuafvCopyShortName Arbitrary Short Name Privilege Escalation

[local] Microsoft Windows 10 1809 – LUAFV Delayed Virtualization Cross Process Handle Duplication Privilege Escalation

[local] Microsoft Windows 10 1809 / 1709 – CSRSS SxSSrv Cached Manifest Privilege Escalation

[local] Microsoft Windows 10 1809 – LUAFV Delayed Virtualization MAXIMUM_ACCESS DesiredAccess Privilege Escalation

[webapps] Joomla Core 1.5.0 – 3.9.4 – Directory Traversal / Authenticated Arbitrary File Deletion

[dos] AdminExpress 1.2.5 – 'Folder Path' Denial of Service (PoC)

[dos] PCHelpWare V2 1.0.0.5 – 'SC' Denial of Service (PoC)