Category: Security

[webapps] Liferay Portal 7.1 CE GA=3 / SimpleCaptcha API – Cross-Site Scripting

[remote] Webmin 1.910 – 'Package Updates' Remote Command Execution (Metasploit)

[local] Ubuntu 18.04 – 'lxd' Privilege Escalation

[webapps] UliCMS 2019.1 'Spitting Lama' – Persistent Cross-Site Scripting

[shellcode] Linux/x86_64 – Bind (4444/TCP) Shell (/bin/sh) Shellcode (104 bytes)

[shellcode] Linux/x86_64 – Bind (4444/TCP) Shell (/bin/sh) Shellcode (131 bytes)

[local] Microsoft Windows – AppX Deployment Service Local Privilege Escalation (3)

[webapps] Supra Smart Cloud TV – 'openLiveURL()' Remote File Inclusion

[remote] IBM Websphere Application Server – Network Deployment Untrusted Data Deserialization Remote Code Execution (Metasploit)

[remote] LibreNMS – addhost Command Injection (Metasploit)