>> CATEGORY: Security

Roundcube rcfilters plugin 2.1.6 – Cross-Site Scripting

Microsoft Windows – ‘CiSetFileCache’ WDAC Security Feature Bypass TOCTOU

WordPress Plugin Wechat Broadcast 1.2.0 – Local File Inclusion

Linux/ARM – Jump Back Shellcode + execve(“/bin/sh”, NULL, NULL) Shellcode (4 Bytes)

NUUO NVRMini2 3.8 – ‘cgi_system’ Buffer Overflow (Enable Telnet)

Bulk SQL Injection using Burp-to-SQLMap

[Persian] Android Application Penetration Testing

Solaris – libnspr NSPR_LOG_FILE Privilege Escalation (Metasploit)

Microsoft Edge Chakra – ‘PathTypeHandlerBase::SetAttributesHelper’ Type Confusion

Microsoft Edge Chakra JIT – ‘localeCompare’ Type Confusion