Tag: 0day

[webapps] – Pi-Hole Web Interface 2.8.1 – Stored XSS in Whitelist/Blacklist

[papers] – [Turkish] Drupal Coder Vulnerability Analysis & MSF Module Dev

[webapps] – GitLab – "impersonate" Feature Privilege Escalation

[webapps] – Zabbix 2.2.x, 3.0.x – SQL Injection

[remote] – Samsung Smart Home Camera SNH-P-6410 – Command Injection

[webapps] Claroline < 1.7.7 – Arbitrary File Inclusion

[remote] – Easy FTP Server – "APPE" Command Buffer Overflow Remote Exploit

[remote] – Apache + PHP < 5.3.12 / < 5.4.2 – Remote Code Execution (Multithreaded Scanner) (2)

[webapps] – FreePBX 13 / 14 – Remote Code Execution

[webapps] – ColoradoFTP 1.3 Prime Edition (Build 8) – Directory Traversal