Category: Security

[shellcode] Windows/x86 – bitsadmin Download and Execute (http://192.168.10.10/evil.exe "c:evil.exe") Shellcode (210 Bytes)

[shellcode] Linux/x86 – ASCII AND, SUB, PUSH, POPAD Encoder Shellcode

[dos] Mozilla Spidermonkey – IonMonkey 'Array.prototype.pop' Type Confusion

[remote] Nagios XI 5.5.6 – Magpie_debug.php Root Remote Code Execution (Metasploit)

[papers] Buffer Overflows, C Programming, NSA GHIDRA and More

[webapps] Fortinet FCM-MB40 – Cross-Site Request Forgery / Remote Command Execution

[webapps] AZADMIN CMS 1.0 – SQL Injection

[webapps] BlogEngine.NET 3.3.6/3.3.7 – 'path' Directory Traversal

[webapps] WordPress Plugin iLive 1.0.4 – Cross-Site Scripting

[webapps] WordPress Plugin Live Chat Unlimited 2.8.3 – Cross-Site Scripting