>> TAG: #remote exploit

LimeSurvey 4.1.11 – ‘Survey Groups’ Persistent Cross-Site Scripting

ZOC Terminal v7.25.5 – ‘Private key file’ Denial of Service (PoC)

UltraVNC Viewer 1.2.4.0 – ‘VNCServer’ Denial of Service (PoC)

Vesta Control Panel 0.9.8-26 – Authenticated Remote Code Execution (Metasploit)

Triologic Media Player 8 – ‘.m3l’ Buffer Overflow (Unicode) (SEH)

WhatsApp Desktop 0.3.9308 – Persistent Cross-Site Scripting

Bolt CMS 3.7.0 – Authenticated Remote Code Execution

LimeSurvey 4.1.11 – ‘File Manager’ Path Traversal

AIDA64 Engineer 6.20.5300 – ‘Report File’ filename Buffer Overflow (SEH)

Pandora FMS 7.0NG – ‘net_tools.php’ Remote Code Execution