>> TAG: #remote exploit

iSQL 1.0 – Shell Command Injection

FRticket Ticket System – Stored XSS

Zabbix 2.2 – 3.0.3 – RCE with API JSON-RPC

Dream Gallery 2.0 – Admin Panel Authentication Bypass

Joomla PayPlans (com_payplans) Extension 3.3.6 – SQL Injection

Viart Shopping Cart 5.0 – CSRF Shell Upload

Grid Gallery 1.0 – Admin Panel Authentication Bypass

OS X Kernel – Exploitable NULL Dereference in IOAccelSharedUserClient2::page_off_resource

OS X Kernel – Stack Buffer Overflow in GeForce GPU Driver

OS X/iOS Kernel – UAF Racing getProperty on IOHDIXController and testNetBootMethod on IOHDIXControllerUserClient