Qualys discovered a minor vulnerability in OpenSMTPD, OpenBSD’s mail server. An unprivileged local attacker can read the first line of an arbitrary file (for example, root’s password hash in /etc/master.passwd)…
>> AUTHOR: deepcore
Qualys discovered a vulnerability in OpenSMTPD, OpenBSD’s mail server. This vulnerability, an out-of-bounds read introduced in December 2015, is exploitable remotely and leads to the execution of arbitrary shell commands.
Core FTP LE 2.2 – Denial of Service (PoC)
PhpIX 2012 Professional – ‘id’ SQL Injection
OpenSMTPD 6.6.3 – Arbitrary File Read
http://nonsanga.go.th/web1/file_editor/dbx.txt notified by SeRaVo BlackHaT
http://www.nasameng.go.th notified by Paraná Cyber Mafia
Amovision AM-Q6320-WIFI HD Camera remote configuration disclosure exploit.
ESCAM QD-900 WIFI HD Camera remote configuration disclosure exploit.
SecuSTATION SC-831 HD Camera remote configuration disclosure exploit.