>> CATEGORY: exploit

Peel Shopping version 8.0.2 suffers from an object injection vulnerability.

This Metasploit module attempts to exploit a race condition in mail.local with the SUID bit set on: NetBSD 7.0 – 7.0.1 (verified on 7.0.1), NetBSD 6.1 – 6.1.5, and NetBSD…

Cisco EPC 3925 suffers from cross site request forgery, cross site scripting, HTTP response injection, and denial of service vulnerabilities.

ASUS RT-N10 routers suffer from code execution, cross site request forgery, open redirection, and cross site scripting vulnerabilities.

PrivateTunnel client version 2.7.0 on x64 local credential disclosure after sign out exploit.

Bezaat Script version 2 suffers from a remote shell upload vulnerability.

Bezaat Script version 2 suffers from a remote SQL injection vulnerability.

Apache Mina 2.0.13 uses the OGNL library in the “IoSessionFinder” class. Its constructor takes into parameter one OGNL expression. Then this expression is executed when the method “find” is called….

WinSMS version 3.43 suffers from a local privilege escalation vulnerability.

Microsoft Internet Explorer version 11.0.9600.18482 use-after-free exploit.