Tag: remote exploit

[webapps] Oracle Business Intelligence / XML Publisher 11.1.1.9.0 / 12.2.1.3.0 / 12.2.1.4.0 – XML External Entity Injection

[local] SystemTap 1.3 – MODPROBE_OPTIONS Privilege Escalation (Metasploit)

[remote] Atlassian Confluence Widget Connector Macro – Velocity Template Injection (Metasploit)

[local] Evernote 7.9 – Code Execution via Path Traversal

[remote] ManageEngine Applications Manager 11.0 < 14.0 – SQL Injection / Remote Code Execution (Metasploit)

[dos] Netwide Assembler (NASM) 2.14rc15 – NULL Pointer Dereference (PoC)

[local] LibreOffice < 6.0.7 / 6.1.3 – Macro Code Execution (Metasploit)

[remote] MailCarrier 2.51 – POP3 'RETR' SEH Buffer Overflow

[dos] Oracle Java Runtime Environment – Heap Corruption During TTF font Rendering in sc_FindExtrema4

[dos] ASUS HG100 – Denial of Service