>> TAG: #0day

Android – getpidcon() Usage in Hardware binder ServiceManager Permits ACL Bypass

OpenDocMan 1.3.4 – ‘search.php where’ SQL Injection

OpenDocMan 1.3.4 – ‘search.php where’ SQL Injection

Linux/x86 – XOR Encoder / Decoder execve() /bin/sh Shellcode (45 bytes)

Linux/x86 – XOR Encoder / Decoder execve() /bin/sh Shellcode (45 bytes)

zzzphp CMS 1.6.1 – Cross-Site Request Forgery

Splunk Enterprise 7.2.4 – Custom App Remote Command Execution (Persistent Backdoor / Custom Binary)

Linux/x86 – iptables -F Shellcode (43 bytes)

Raisecom XPON ISCOMHT803G-U_2.0.0_140521_R4.1.47.002 – Remote Code Execution

Linux/x86 – NOT Encoder / Decoder – execve(/bin/sh) Shellcode (44 bytes)