Category: Security

[webapps] MyBB Plugin Last User's Threads in Profile Plugin 1.2 – Persistent Cross-Site Scripting

[webapps] Hikvision IP Camera versions 5.2.0 – 5.3.9 (Builds 140721 – 170109) – Access Control Bypass

[dos] Easy Avi Divx Xvid to DVD Burner 2.9.11 – '.avi' Denial of Service

[local] Crashmail 1.6 – Stack-Based Buffer Overflow ( ROP execve )

[local] Easy CD DVD Copy 1.3.24 – Local Buffer Overflow (SEH)

[local] Linux Kernel < 4.15.4 – 'show_floppy' KASLR Address Leak

[papers] Windows Kernel Exploitation Tutorial Part 7: Uninitialized Heap Variable

[dos] Microsoft Windows Kernel – 'nt!KiDispatchException' 64-bit Stack Memory Disclosure

[dos] Internet Explorer – 'RegExp.lastMatch' Memory Disclosure

[local] Microsoft Windows – Desktop Bridge Virtual Registry NtLoadKey Arbitrary File Read/Write Privilege Escalation