>> TAG: #remote exploit

Sahi Pro 8.0.0 – Remote Command Execution

Jenkins Dependency Graph View Plugin 0.13 – Persistent Cross-Site Scripting

Citrix SD-WAN Appliance 10.2.2 – Authentication Bypass / Remote Command Execution

Tenda D301 v2 Modem Router – Persistent Cross-Site Scripting

Microsoft Font Subsetting – DLL Heap Corruption in ComputeFormat4CmapData

Xymon 4.3.25 – useradm Command Execution (Metasploit)

Sitecore 9.0 rev 171002 – Persistent Cross-Site Scripting

SNMPc Enterprise Edition 9/10 – Mapping Filename Buffer Overflow

Microsoft Windows – Font Subsetting DLL Heap-Based Out-of-Bounds Read in MergeFonts

Mozilla Spidermonkey – Unboxed Objects Uninitialized Memory Access