>> CATEGORY: exploit

PCMan FTP server version 2.0.7 LIST command buffer overflow exploit.

Droid4XService (Droid4XService.exe) installs as a service with an unquoted service path running with SYSTEM privileges. This could potentially allow an authorized but non-privileged local user to execute arbitrary code with…

Verint Impact 360 version 11.1 suffers from an open redirection vulnerability.

Samsung Software Update Service, SWUpdateService (SWMAgent.exe), installs as a service with an unquoted service path running with SYSTEM privileges. This could potentially allow an authorized but non-privileged local user to…

A specially crafted HTTP response can cause the CHttpHeaderParser::ParseStatusLine method in WININET to read data beyond the end of a buffer. The size of the read can be controlled through…

4images versions 1.7.13 and below suffer from a remote SQL injection vulnerability.

Exponent CMS version 2.4.0 suffers from a remote blind SQL injection vulnerability.

Microsoft Internet Explorer versions 9, 10, and 11 suffer from an MSHTML PROPERTYDESC::HandleStyleComponentProperty out-of-bounds read.

Nero version 7.10.1.0 suffers from an unquoted service path privilege escalation vulnerability.

An information disclosure vulnerability was found in the W3 Total Cache plugin. This issue allows an attacker to hijack sensitive information, such as the administrator’s session cookie. Exploiting the vulnerability…