Category: Security

[webapps] – Qlikview <= 11.20 SR11 – Blind XXE Injection Vulnerability

[dos] – PHP GMP unserialize() Use-After-Free

[papers] – Shoot zend_executor_globals to bypass php disable_functions

[local] – Cisco Sourcefire User Agent 2.2 – Insecure File Permissions

[local] – IBM AIX High Availability Cluster Multiprocessing (HACMP) Local Privilege Escalation 0day

[dos] – Advantech WebAccess 8.0, 3.4.3 ActiveX – Multiple Vulnerabilities

[webapps] – DirectAdmin Web Control Panel 1.483 – Multiple Vulnerabilities

[webapps] – Zhone ADSL2+ 4P Bridge & Router (Broadcom) – Multiple Vulnerabilities

[local] – VeryPDF HTML Converter 2.0 – SEH/ToLower() Bypass Buffer Overflow

[webapps] – NETGEAR Wireless Management System 2.1.4.15 (Build 1236) – Privilege Escalation