Category: Security

[webapps] BlogEngine.NET 3.3.6/3.3.7 – 'dirPath' Directory Traversal / Remote Code Execution

[webapps] BlogEngine.NET 3.3.6/3.3.7 – 'theme Cookie' Directory Traversal / Remote Code Execution

[webapps] Sahi pro 7.x/8.x – Directory Traversal

[webapps] Sahi pro 8.x – SQL Injection

[webapps] Sahi pro 8.x – Cross-Site Scripting

[shellcode] Linux/x86_64 – execve(/bin/sh) Shellcode (22 bytes)

[local] Serv-U FTP Server < 15.1.7 – Local Privilege Escalation

[remote] AROX School-ERP Pro – Unauthenticated Remote Command Execution (Metasploit)

[webapps] Spring Security OAuth – Open Redirector

[dos] Thunderbird ESR < 60.7.XXX – Type Confusion