Category: Security

[webapps] OctoberCMS 1.0.425 (Build 425) – Cross-Site Scripting

[webapps] E-Sic Software livre CMS – 'cpfcnpj' Parameter SQL Injection

[webapps] Trend Micro OfficeScan 11.0/XG (12.0) – Remote Code Execution (Metasploit)

[webapps] Trend Micro InterScan Messaging Security (Virtual Appliance) – Remote Code Execution (Metasploit)

[local] ASX to MP3 3.1.3.7 – '.m3u' Buffer Overflow

[webapps] Complain Management System – Hard-Coded Credentials / Blind SQL injection

[remote] Rancher Server – Docker Daemon Code Execution (Metasploit)

[remote] OrientDB 2.2.2 – 2.2.22 – Remote Code Execution (Metasploit)

[webapps] QNAP HelpDesk < 1.1.12 – SQL Injection

[dos] PyroBatchFTP 3.17 – Buffer Overflow (SEH)