>> TAG: #remote exploit

Wedding Slideshow Studio 1.36 – ‘Key’ Buffer Overflow

Forcepoint WebSecurity 8.5 – Reflective Cross-Site Scripting

LearnDash WordPress LMS Plugin 3.1.2 – Reflective Cross-Site Scripting

Windscribe – WindscribeService Named Pipe Privilege Escalation (Metasploit)

ExpertGPS 6.38 – XML External Entity Injection

QuickDate 1.3.2 – SQL Injection

ELAN Smart-Pad 11.10.15.1 – ‘ETDService’ Unquoted Service Path

TapinRadio 2.12.3 – ‘address’ Denial of Service (PoC)

AbsoluteTelnet 11.12 – ‘SSH2/username’ Denial of Service (PoC)

TapinRadio 2.12.3 – ‘username’ Denial of Service (PoC)