Tag: 0day

[webapps] ClipBucket – beats_uploader Unauthenticated Arbitrary File Upload (Metasploit)

[remote] TestLink Open Source Test Management < 1.9.16 – Remote Code Execution (PoC)

[local] LabF nfsAxe 3.7 – Privilege Escalation

[webapps] Laravel Log Viewer < 0.13.0 – Local File Download

[remote] Acrolinx Server < 5.2.5 – Directory Traversal

[dos] Android Bluetooth – BNEP BNEP_SETUP_CONNECTION_REQUEST_MSG Out-of-Bounds Read

[dos] Android Bluetooth – BNEP bnep_data_ind() Remote Heap Disclosure

[dos] WM Recorder 16.8.1 – Denial of Service

[webapps] MyBB Plugin Last User's Threads in Profile Plugin 1.2 – Persistent Cross-Site Scripting

[webapps] Hikvision IP Camera versions 5.2.0 – 5.3.9 (Builds 140721 – 170109) – Access Control Bypass