>> TAG: #remote exploit

AngularJS​ ​Template​ ​Injection

School Management Script 3.0.4 – Authentication Bypass

Concrete5 < 8.3.0 – Username / Comments Enumeration

Sony Playstation 4 (PS4) 4.55 – Jailbreak (WebKit 5.01 / ‘bpf’ Kernel Loader 4.55)

Sony Playstation 4 (PS4) 5.01 < 5.05 – WebKit Code Execution (PoC)

CloudMe Sync 1.10.9 – Stack-Based Buffer Overflow (Metasploit)

AsusWRT LAN – Unauthenticated Remote Code Execution (Metasploit)

Disk Savvy Enterprise 10.4.18 – Stack-Based Buffer Overflow (Metasploit)

Sony Playstation 4 4.55 FW – Local Kernel

Parasiting web server process with webshells in permissive environments