>> TAG: #remote exploit

Pegasus CMS 1.0 – ‘extra_fields.php’ Plugin Remote Code Execution

Core FTP Server FTP / SFTP Server v2 Build 674 – ‘SIZE’ Directory Traversal

Microsoft Windows – .reg File / Dialog Box Message Spoofing

Core FTP Server FTP / SFTP Server v2 Build 674 – ‘MDTM’ Directory Traversal

WordPress Plugin GraceMedia Media Player 1.0 – Local File Inclusion

PilusCart 1.4.1 – Cross-Site Request Forgery (Add Admin)

Core FTP 2.0 build 653 – ‘PBSZ’ Denial of Service (PoC)

Linux/x86 – Polymorphic execve(/bin/sh) Shellcode (63 bytes)

Liferay CE Portal < 7.1.2 ga3 – Remote Command Execution (Metasploit)

OpenKM 6.3.2 < 6.3.7 – Remote Command Execution (Metasploit)