Tag: 0day

[remote] GoAhead Web Server 2.5 < 3.6.5 – HTTPd 'LD_PRELOAD' Arbitrary Module Load (Metasploit)

[local] Oracle VirtualBox < 5.1.30 / < 5.2-rc1 – Guest to Host Escape

[papers] HackSysTeam Windows Kernel Vulnerable Driver: Type Confusion Vulnerability Exploitation

[local] Sync Breeze Enterprise 9.5.16 – 'Import Command' Buffer Overflow (Metasploit)

[dos] RAVPower 2.000.056 – Memory Disclosure

[webapps] NEC Univerge SV9100/SV8100 WebPro 10.0 – Configuration Download

[local] HP Connected Backup 8.6/8.8.6 – Local Privilege Escalation

[webapps] CentOS Web Panel 0.9.8.12 – 'row_id' / 'domain' SQL Injection

[dos] MixPad 5.00 – Buffer Overflow

[papers] Hardcore SAP Penetration Testing