Tag: 0day

[remote] Pulse Secure 8.1R15.1/8.2/8.3/9.0 SSL VPN – Remote Code Execution

[remote] AwindInc SNMP Service – Command Injection (Metasploit)

[webapps] WordPress Plugin Download Manager 2.9.93 – Cross-Site Scripting

[webapps] DASAN Zhone ZNID GPON 2426A EU – Multiple Cross-Site Scripting

[local] ktsuss 1.4 – suid Privilege Escalation (Metasploit)

[local] ptrace – Sudo Token Privilege Escalation (Metasploit)

[remote] Cisco UCS Director – default scpuser password (Metasploit)

[local] ChaosPro 2.1 – SEH Buffer Overflow

[webapps] WordPress Plugin Event Tickets 4.10.7.1 – CSV Injection

[local] ChaosPro 3.1 – SEH Buffer Overflow