>> TAG: #remote exploit

Centreon 19.10.5 – ‘id’ SQL Injection

Fork CMS 5.8.0 – Persistent Cross-Site Scripting

Nsauditor 3.2.1.0 – Buffer Overflow (SEH+ASLR bypass (3 bytes overwrite))

Rubo DICOM Viewer 2.0 – Buffer Overflow (SEH)

Atomic Alarm Clock x86 6.3 – ‘AtomicAlarmClock’ Unquoted Service Path

Unraid 6.8.0 – Auth Bypass PHP Code Execution (Metasploit)

Nexus Repository Manager – Java EL Injection RCE (Metasploit)

Code Blocks 16.01 – Buffer Overflow (SEH) UNICODE

VMware Fusion – USB Arbitrator Setuid Privilege Escalation (Metasploit)

TP-Link Archer A7/C7 – Unauthenticated LAN Remote Code Execution (Metasploit)