Category: Security

[remote] – PCMAN FTP 2.0.7 – ls Command Buffer Overflow (Metasploit)

[papers] – [Hebrew] Digital Whisper Security Magazine #71

[dos] – Banshee 2.6.2 – .mp3 Crash PoC

[webapps] – IonizeCMS 1.0.8 – (Add Admin) CSRF

[remote] – DarkComet Server Remote File Download Exploit (msf)

[webapps] – Yona CMS – (Add Admin) CSRF

[dos] – Windows – gdi32.dll Multiple DIB-Related EMF Record Handlers Heap-Based Out-of-Bounds Reads/Memory Disclosure (MS16-074)

[webapps] – SAP NetWeaver AS JAVA 7.1 – 7.5 – Directory Traversal

[webapps] – SAP NetWeaver AS JAVA 7.1 – 7.5 – ctcprotocol Servlet XXE

[local] – Linux – ecryptfs and /proc/$pid/environ Privilege Escalation