Category: Security

[dos] Microsoft Windows Font Cache Service – Insecure Sections Privilege Escalation

[papers] Threat Hunting – Hunter or Hunted

[remote] EA Origin < 10.5.38 – Remote Code Execution

[papers] Sony PlayStation Vita (PS Vita) – Trinity: PSP Emulator Escape

[local] Tuneclone 2.20 – Local SEH Buffer Overflow

[webapps] WebERP 4.15 – SQL injection

[webapps] BlogEngine.NET 3.3.6/3.3.7 – XML External Entity Injection

[dos] Linux – Use-After-Free via race Between modify_ldt() and #BR Exception

[remote] Cisco Prime Infrastructure Health Monitor – TarArchive Directory Traversal (Metasploit)

[local] Cisco Prime Infrastructure – Runrshell Privilege Escalation (Metasploit)