Category: Security

[webapps] Dolibarr ERP-CRM 10.0.1 – 'elemid' SQL Injection

[webapps] WordPress 5.2.3 – Cross-Site Host Modification

[remote] Pulse Secure 8.1R15.1/8.2/8.3/9.0 SSL VPN – Remote Code Execution

[remote] AwindInc SNMP Service – Command Injection (Metasploit)

[webapps] WordPress Plugin Download Manager 2.9.93 – Cross-Site Scripting

[webapps] DASAN Zhone ZNID GPON 2426A EU – Multiple Cross-Site Scripting

[local] ktsuss 1.4 – suid Privilege Escalation (Metasploit)

[local] ptrace – Sudo Token Privilege Escalation (Metasploit)

[remote] Cisco UCS Director – default scpuser password (Metasploit)

[local] ChaosPro 2.1 – SEH Buffer Overflow