>> TAG: #0day

MiniFtp – ‘parseconf_load_setting’ Buffer Overflow

Linux/x86 – execve /bin/sh Shellcode (20 bytes)

Lotus Domino 8.5.3 – ‘EXAMINE’ Stack Buffer Overflow DEP/ASLR Bypass (NSA’s EMPHASISMINE)

jetAudio 8.1.7.20702 Basic – ‘Enter URL’ Denial of Service (PoC)

NetNumber Titan ENUM/DNS/NP 7.9.1 – Path Traversal / Authorization Bypass

Easy Chat Server 3.1 – ‘message’ Denial of Service (PoC)

Prinect Archive System 2015 Release 2.6 – Cross-Site Scripting

Admin Express 1.2.5.485 – ‘Folder Path’ Local SEH Alphanumeric Encoded Buffer Overflow

Xitami Web Server 2.5 – Remote Buffer Overflow (SEH + Egghunter)

PHPads 2.0 – ‘click.php3?bannerID’ SQL Injection