Category: Security

[webapps] NEC Univerge Sv9100 WebPro – 6.00 – Predictable Session ID / Clear Text Password Storage

[webapps] DomainMOD 4.11.01 – Owner name Field Cross-Site Scripting

[webapps] FreshRSS 1.11.1 – Cross-Site Scripting

[dos] Microsoft Lync for Mac 2011 – Injection Forced Browsing/Download

[webapps] Rockwell Automation Allen-Bradley PowerMonitor 1000 – Incorrect Access Control Authentication Bypass

[local] Xorg X11 Server (AIX) – Local Privilege Escalation

[remote] OpenSSH < 7.7 – User Enumeration (2)

[shellcode] Linux/x86 – /usr/bin/head -n99 cat etc/passwd Shellcode (61 Bytes)

[webapps] Joomla! Component JE Photo Gallery 1.1 – 'categoryid' SQL Injection

[dos] Mozilla Firefox 63.0.1 – Denial of Service (PoC)