Category: Security

[local] – TACK 1.07 – Local Stack-Based Buffer Overflow

[local] – FBZX 2.10 – Local Stack-Based Buffer Overflow

[webapps] – WordPress WP Fastest Cache Plugin 0.8.4.8 – Blind SQL Injection

[dos] – PHPMyLicense 3.0.0 – 3.1.4 – DoS

[webapps] – YESWIKI 0.2 – Path Traversal Vulnerability

[webapps] – Jenkins 1.633 – Unauthenticated Credential Recovery

[webapps] – Google AdWords <= 6.2.0 API client libraries – XML eXternal Entity Injection (XXE)

[remote] – Huawei HG630a and HG630a-50 – Default SSH Admin Password on ADSL Modems

[webapps] – Google AdWords API PHP client library <= 6.2.0 – Arbitrary PHP Code Execution

[webapps] – eBay Magento CE <= 1.9.2.1 – Unrestricted Cron Script (Potential Code Execution / DoS)