Month: December 2019

[local] NextVPN v4.10 – Insecure File Permissions

[webapps] WordPress Ultimate Addons for Beaver Builder 1.2.4.1 – Authentication Bypass

[local] AVS Audio Converter 9.1.2.600 – Stack Overflow (PoC)

[webapps] HomeAutomation 3.3.2 – Cross-Site Request Forgery (Add Admin)

[webapps] HomeAutomation 3.3.2 – Authentication Bypass

[webapps] HomeAutomation 3.3.2 – Persistent Cross-Site Scripting

[local] Reptile Rootkit – reptile_cmd Privilege Escalation (Metasploit)

[local] Microsoft UPnP – Local Privilege Elevation (Metasploit)

[local] OpenBSD – Dynamic Loader chpass Privilege Escalation (Metasploit)

[webapps] HomeAutomation 3.3.2 – Remote Code Execution