Category: Security

[webapps] Fastweb FASTGate 0.00.47 – Cross-site Request Forgery

[webapps] ModbusPal 1.6b – XML External Entity Injection

[webapps] MyBB Latest Posts on Profile Plugin 1.1 – Cross-Site Scripting

[dos] Dell Touchpad – 'ApMsgFwd.exe' Denial of Service

[shellcode] Linux/x86 – Bind TCP Shell + fork() Shellcode (113 bytes)

[local] FxCop 10/12 – XML External Entity Injection

[papers] Web Forensics

[remote] FTPShell Client 6.7 – Buffer Overflow

[remote] Palo Alto Networks – readSessionVarsFromFile() Session Corruption (Metasploit)

[remote] PlaySMS – import.php Authenticated CSV File Upload Code Execution (Metasploit)