[local] 10Strike LANState 9.32 – ‘Force Check’ Buffer Overflow (SEH)
10Strike LANState 9.32 – ‘Force Check’ Buffer Overflow (SEH)
[remote] SharePoint Workflows – XOML Injection (Metasploit)
SharePoint Workflows – XOML Injection (Metasploit)
[remote] Redis – Replication Code Execution (Metasploit)
Redis – Replication Code Execution (Metasploit)
[remote] DLINK DWL-2600 – Authenticated Remote Command Injection (Metasploit)
DLINK DWL-2600 – Authenticated Remote Command Injection (Metasploit)
[remote] IBM TM1 / Planning Analytics – Unauthenticated Remote Code Execution (Metasploit)
IBM TM1 / Planning Analytics – Unauthenticated Remote Code Execution (Metasploit)
[webapps] Grandstream UCM6200 Series CTI Interface – ‘user_password’ SQL Injection
Grandstream UCM6200 Series CTI Interface – ‘user_password’ SQL Injection
[webapps] Grandstream UCM6200 Series WebSocket 1.0.20.20 – ‘user_password’ SQL Injection
Grandstream UCM6200 Series WebSocket 1.0.20.20 – ‘user_password’ SQL Injection
[webapps] Grandstream UCM6200 Series WebSocket 1.0.20.20 – ‘user_password’ SQL Injection
Grandstream UCM6200 Series WebSocket 1.0.20.20 – ‘user_password’ SQL Injection
[dos] FlashFXP 4.2.0 Build 1730 – Denial of Service (PoC)
FlashFXP 4.2.0 Build 1730 – Denial of Service (PoC)