Tag: 0day

[webapps] WSTMart 2.0.8 – Cross-Site Request Forgery (Add Admin)

[webapps] FrontAccounting 2.4.5 – 'SubmitUser' SQL Injection

[dos] Angry IP Scanner for Linux 3.5.3 – Denial of Service (PoC)

[local] AnyBurn 4.3 – Local Buffer Overflow (SEH)

[dos] Microsoft Edge 42.17134.1.0 – 'Tree::ANode::DocumentLayout' Denial of Service

[webapps] ZeusCart 4.0 – Cross-Site Request Forgery (Deactivate Customer Accounts)

[local] LanSpy 2.0.1.159 – Buffer Overflow (SEH) (Egghunter)

[papers] An Internal Pentest Audit Against Active Directory

[dos] VBScript – MSXML Execution Policy Bypass

[local] Linux Kernel 4.4 – 'rtnetlink' Stack Memory Disclosure