Tag: 0day

[local] LabF nfsAxe 3.7 Ping Client – 'Host IP' Buffer Overflow (Direct Ret)

[webapps] 74CMS 5.0.1 – Cross-Site Request Forgery (Add New Admin User)

[remote] ManageEngine Applications Manager 14.0 – Authentication Bypass / Remote Command Execution (Metasploit)

[webapps] Oracle Business Intelligence 11.1.1.9.0 / 12.2.1.3.0 / 12.2.1.4.0 – Directory Traversal

[webapps] Oracle Business Intelligence / XML Publisher 11.1.1.9.0 / 12.2.1.3.0 / 12.2.1.4.0 – XML External Entity Injection

[local] SystemTap 1.3 – MODPROBE_OPTIONS Privilege Escalation (Metasploit)

[remote] Atlassian Confluence Widget Connector Macro – Velocity Template Injection (Metasploit)

[local] Evernote 7.9 – Code Execution via Path Traversal

[remote] ManageEngine Applications Manager 11.0 < 14.0 – SQL Injection / Remote Code Execution (Metasploit)

[dos] Netwide Assembler (NASM) 2.14rc15 – NULL Pointer Dereference (PoC)