Category: Security

[webapps] Roundcube rcfilters plugin 2.1.6 – Cross-Site Scripting

[dos] Microsoft Windows – 'CiSetFileCache' WDAC Security Feature Bypass TOCTOU

[webapps] WordPress Plugin Wechat Broadcast 1.2.0 – Local File Inclusion

[shellcode] Linux/ARM – Jump Back Shellcode + execve("/bin/sh", NULL, NULL) Shellcode (4 Bytes)

[remote] NUUO NVRMini2 3.8 – 'cgi_system' Buffer Overflow (Enable Telnet)

[papers] Bulk SQL Injection using Burp-to-SQLMap

[papers] [Persian] Android Application Penetration Testing

[local] Solaris – libnspr NSPR_LOG_FILE Privilege Escalation (Metasploit)

[dos] Microsoft Edge Chakra – 'PathTypeHandlerBase::SetAttributesHelper' Type Confusion

[dos] Microsoft Edge Chakra JIT – 'localeCompare' Type Confusion