Tag: remote exploit

[dos] iDailyDiary 4.30 – Denial of Service (PoC)

[webapps] Schlix CMS 2.2.6-6 – Arbitary File Upload And Directory Traversal Leads To RCE (Authenticated)

[webapps] Microsoft Exchange 2019 – Unauthenticated Email Download (Metasploit)

[local] DELL dbutil_2_3.sys 2.3 – Arbitrary Write to Local Privilege Escalation (LPE)

[webapps] Spotweb 1.4.9 – DOM Based Cross-Site Scripting (XSS)

[local] Mozilla Firefox 88.0.1 – File Extension Execution of Arbitrary Code

[local] Acer Updater Service 1.2.3500.0 – 'UpdaterService.exe' Unquoted Service Path

[local] Backup Manager Module 3.0.0.99 – 'IScheduleSvc.exe' Unquoted Service Path

[local] ASUS HID Access Service 1.0.94.0 – 'AsHidSrv.exe' Unquoted Service Path

[webapps] ManageEngine ADSelfService Plus 6.1 – CSV Injection