Category: Security

[local] Microsoft Windows .Group File – Code Execution

[webapps] WordPress Ultimate Addons for Beaver Builder 1.2.4.1 – Authentication Bypass

[local] NextVPN v4.10 – Insecure File Permissions

[webapps] HomeAutomation 3.3.2 – Remote Code Execution

[local] OpenBSD – Dynamic Loader chpass Privilege Escalation (Metasploit)

[local] Microsoft UPnP – Local Privilege Elevation (Metasploit)

[local] Reptile Rootkit – reptile_cmd Privilege Escalation (Metasploit)

[webapps] HomeAutomation 3.3.2 – Persistent Cross-Site Scripting

[webapps] HomeAutomation 3.3.2 – Authentication Bypass

[webapps] HomeAutomation 3.3.2 – Cross-Site Request Forgery (Add Admin)