Tag: 0day

[webapps] Imperva SecureSphere 13 – Remote Command Execution

[papers] WordPress Penetration Testing using WPScan and MetaSploit

[dos] Android – sdcardfs Changes current->fs Without Proper Locking

[remote] Navigate CMS – Unauthenticated Remote Code Execution (Metasploit)

[remote] Unitrends UEB – HTTP API Remote Code Execution (Metasploit)

[local] Zahir Enterprise Plus 6 – Stack Buffer Overflow (Metasploit)

[dos] Linux – Kernel Pointer Leak via BPF

[webapps] FLIR Thermal Traffic Cameras 1.01-0bb5b27 – RTSP Stream Disclosure

[webapps] Chamilo LMS 1.11.8 – 'firstname' Cross-Site Scripting

[webapps] Netis ADSL Router DL4322D RTK 2.1.1 – Cross-Site Request Forgery (Add Admin)