>> CATEGORY: exploit

There is a stack overflow in Linux via ecryptfs and /proc/$pid/environ.

Joomla BT Media component version 1.0 suffers from a remote SQL injection vulnerability.

Symphony CMS version 2.6.7 suffers from a session fixation vulnerability.

ACROS Security 0patch (0PatchServicex64.exe) version 2016.05.19.539 suffers from an unquoted service path privilege escalation vulnerability.

This Metasploit module exploits a stack over flow in Tomabo MP4 Player versions 3.11.6 and below. When the application is used to open a specially crafted m3u file, an buffer…

Airia suffers from a remote shell upload vulnerability.

Airia suffers from a cross site request forgery vulnerability.

Airia suffers from reflective and persistent cross site scripting vulnerabilities.

sNews CMS version 1.7.1 suffers from cross site request forgery, cross site scripting, and remote code execution vulnerabilities.

phpATM version 1.32 suffers from a remote shell upload vulnerability.