Tag: 0day

[webapps] MyBB Latest Posts on Profile Plugin 1.1 – Cross-Site Scripting

[dos] Dell Touchpad – 'ApMsgFwd.exe' Denial of Service

[shellcode] Linux/x86 – Bind TCP Shell + fork() Shellcode (113 bytes)

[local] FxCop 10/12 – XML External Entity Injection

[papers] Web Forensics

[remote] FTPShell Client 6.7 – Buffer Overflow

[remote] Palo Alto Networks – readSessionVarsFromFile() Session Corruption (Metasploit)

[remote] PlaySMS – import.php Authenticated CSV File Upload Code Execution (Metasploit)

[dos] 2345 Security Guard 3.7 – Denial of Service

[remote] PlaySMS 1.4 – 'sendfromfile.php?Filename' Authenticated 'Code Execution (Metasploit)