>> CATEGORY: exploit

FreePBX versions prior to 13.0.188 remote root exploit.

Adobe Flash versions 23 and below local-with-filesystem sandbox bypass via navigateToURL() and UI redressing. Proof of concept included.

AVer Information EH6108H+ hybrid DVR suffers from authentication bypass, hard-coded credential, and information exposure vulnerabilities.

Pop Under Ads Network version 1.0 discloses MySQL credentials in html source code.

VenShop System 2010 suffers from a database disclosure vulnerability.

MSI NTIOLib.sys and WinIO.sys suffers from a local privilege escalation vulnerability.

Iperius Remote version 1.7.0 suffers from an unquoted service path privilege escalation vulnerability.

Macro Expert version 4.0 suffers from multiple privilege escalation vulnerabilities.

Epson WorkForce multi-function printers do not use signed firmware images and allow unauthorized malicious firmware-updates. Additionally, they suffer from a cross site request forgery vulnerability that allows an attacker to…

u5 CMS version 5.1.4 suffers from an open redirection vulnerability.