Category: Security

[webapps] – Navis WebAccess – SQL Injection

[webapps] – phpCollab CMS 2.5 – (emailusers.php) SQL Injection

[webapps] – WordPress Add From Server Plugin < 3.3.2 – (File Upload) CSRF

[local] – Microsoft Windows Group Policy – Privilege Escalation (MS16-072)

[remote] – Drupal Module Coder < 7.x-1.3 / 7.x-2.6 – Remote Code Execution Exploit (SA-CONTRIB-2016-039)

[webapps] – NUUO NVRmini 2 3.0.8 – (Add Admin) CSRF

[webapps] – NUUO NVRmini 2 3.0.8 – Remote Root Exploit

[dos] – Kodi Web Server 16.1 – Denial of Service

[webapps] – NUUO NVRmini 2 3.0.8 – Arbitrary File Deletion

[webapps] – NUUO NVRmini 2 3.0.8 – Local File Disclosure