>> CATEGORY: exploit

Chrome V8 has multiple bugs in Genesis::InitializeGlobal.

A security fix applied for Microsoft Edge Chakra JIT is incomplete.

A security fix applied for Microsoft Edge Chakra JIT is incomplete.

This Metasploit module will generate and upload a plugin to ProcessMaker resulting in execution of PHP code as the web server user. Credentials for a valid user account with Administrator…

Rockwell LOGIX 5324 ER suffers from cross site scripting and html injection vulnerabilities.

Inspection of mpengine.dll revealed that the code responsible for processing RAR archives appears to be a forked and modified version of the original unrar code and has a vulnerability that…

Sophos Endpoint Protection version 10.7 suffers from a tamper protection bypass vulnerability.

Sophos Endpoint Protection version 10.7 control panel authentication uses a weak unsalted unicoded cryptographic hash (SHA1) function. Not using a salt allows attackers that gain access to hash ability to…

Adobe Flash versions 28.0.0.137 and below remote code execution proof of concept exploit.

Microsoft Sharepoint version 14.x suffers from a cross site scripting vulnerability.