Month: June 2019

[remote] SAPIDO RB-1732 – Remote Command Execution

[remote] SuperDoctor5 – 'NRPE' Remote Code Execution

[webapps] WordPress Plugin Live Chat Unlimited 2.8.3 – Cross-Site Scripting

[webapps] WordPress Plugin iLive 1.0.4 – Cross-Site Scripting

[webapps] BlogEngine.NET 3.3.6/3.3.7 – 'path' Directory Traversal

[webapps] AZADMIN CMS 1.0 – SQL Injection

[webapps] Fortinet FCM-MB40 – Cross-Site Request Forgery / Remote Command Execution

[papers] Buffer Overflows, C Programming, NSA GHIDRA and More

[dos] Microsoft Windows Font Cache Service – Insecure Sections Privilege Escalation

[dos] Microsoft Windows – 'CmpAddRemoveContainerToCLFSLog' Arbitrary File/Directory Creation