Category: Security

[webapps] BEESCMS 4.0 – Cross-Site Request Forgery (Add Admin)

[webapps] DIGISOL DG-HR3400 Wireless Router – Cross-Site Scripting

[papers] UAC Bypass & Research with UAC-A-Mola

[remote] Quest KACE Systems Management – Command Injection (Metasploit)

[webapps] HPE VAN SDN 2.7.18.0503 – Remote Root

[webapps] WordPress < 4.9.6 – (Authenticated) Arbitrary File Deletion

[webapps] Liferay Portal < 7.0.4 – Server-Side Request Forgery

[dos] PoDoFo 0.9.5 – Buffer Overflow

[papers] Discovering and Plotting Hidden Networks created with USB Devices

[webapps] DIGISOL DG-BR4000NG – Cross-Site Scripting