Tag: 0day

[webapps] WordPress Plugin Wechat Broadcast 1.2.0 – Local File Inclusion

[shellcode] Linux/ARM – Jump Back Shellcode + execve("/bin/sh", NULL, NULL) Shellcode (4 Bytes)

[remote] NUUO NVRMini2 3.8 – 'cgi_system' Buffer Overflow (Enable Telnet)

[papers] Bulk SQL Injection using Burp-to-SQLMap

[papers] [Persian] Android Application Penetration Testing

[local] Solaris – libnspr NSPR_LOG_FILE Privilege Escalation (Metasploit)

[dos] Microsoft Edge Chakra – 'PathTypeHandlerBase::SetAttributesHelper' Type Confusion

[dos] Microsoft Edge Chakra JIT – 'localeCompare' Type Confusion

[remote] Ubisoft Uplay Desktop Client 63.0.5699.0 – Remote Code Execution

[dos] XAMPP Control Panel 3.2.2 – Denial of Service (PoC)