Category: Security

[remote] Xitami Web Server 2.5 – Remote Buffer Overflow (SEH + Egghunter)

[webapps] PHPads 2.0 – 'click.php3?bannerID' SQL Injection

[webapps] microASP (Portal+) CMS – 'pagina.phtml?explode_tree' SQL Injection

[shellcode] Linux/x86 – Multiple keys XOR Encoder / Decoder execve(/bin/sh) Shellcode (59 bytes)

[shellcode] Linux/x86 – shred file Shellcode (72 bytes)

[local] NSClient++ 0.5.2.35 – Privilege Escalation

[dos] iOS 12.1.3 – 'cfprefsd' Memory Corruption

[remote] LG Supersign EZ CMS – Remote Code Execution (Metasploit)

[webapps] ReadyAPI 2.5.0 / 2.6.0 – Remote Code Execution

[webapps] Instagram Auto Follow – Authentication Bypass