Category: Security

[webapps] – Nagios Log Server 1.4.1 – Multiple Vulnerabilities

[shellcode] – Windows x86 – CreateProcessA cmd.exe Shellcode (253 bytes)

[webapps] – Pi-Hole Web Interface 2.8.1 – Stored XSS in Whitelist/Blacklist

[papers] – [Turkish] Drupal Coder Vulnerability Analysis & MSF Module Dev

[webapps] – GitLab – "impersonate" Feature Privilege Escalation

[webapps] – Zabbix 2.2.x, 3.0.x – SQL Injection

[remote] – Samsung Smart Home Camera SNH-P-6410 – Command Injection

[webapps] Claroline < 1.7.7 – Arbitrary File Inclusion

[remote] – Easy FTP Server – "APPE" Command Buffer Overflow Remote Exploit

[remote] – Apache + PHP < 5.3.12 / < 5.4.2 – Remote Code Execution (Multithreaded Scanner) (2)