>> TAG: #remote exploit

iDailyDiary 4.30 – Denial of Service (PoC)

Schlix CMS 2.2.6-6 – Arbitary File Upload And Directory Traversal Leads To RCE (Authenticated)

Microsoft Exchange 2019 – Unauthenticated Email Download (Metasploit)

DELL dbutil_2_3.sys 2.3 – Arbitrary Write to Local Privilege Escalation (LPE)

Spotweb 1.4.9 – DOM Based Cross-Site Scripting (XSS)

Mozilla Firefox 88.0.1 – File Extension Execution of Arbitrary Code

Acer Updater Service 1.2.3500.0 – ‘UpdaterService.exe’ Unquoted Service Path

Backup Manager Module 3.0.0.99 – ‘IScheduleSvc.exe’ Unquoted Service Path

ASUS HID Access Service 1.0.94.0 – ‘AsHidSrv.exe’ Unquoted Service Path

ManageEngine ADSelfService Plus 6.1 – CSV Injection