Category: Security

[webapps] WordPress Plugin Smart Google Code Inserter < 3.5 – Authentication Bypass / SQL Injection

[papers] Spectre – Trick Error-Free Applications Into Giving Up Secret Information

[webapps] EMC xPression 4.5SP1 Patch 13 – 'model.jobHistoryId' SQL Injection

[papers] [Hebrew] Digital Whisper Security Magazine #90

[remote] Cambium ePMP1000 – 'get_chart' Shell via Command Injection (Metasploit)

[remote] Cambium ePMP1000 – 'ping' Shell via Command Injection (Metasploit)

[remote] HP Mercury LoadRunner Agent magentproc.exe – Remote Command Execution (Metasploit)

[dos] D3DGear 5.00 Build 2175 – Buffer Overflow

[webapps] PHP Melody 2.7.1 – 'playlist' SQL Injection

[remote] NetTransport 2.96L – Buffer Overflow (DEP Bypass)