Categoria: Segurança da Informação

LabCollector 5.423 – SQL Injection # Exploit Title: LabCollector (Sistema de Informação do Laboratório) 5.423 – Injeção SQL Múltipla # Data: 09/09/2019 # Links /

PHP 7.0 < 7.3 (Unix) – ‘gc’ Disable Functions Bypass <?php # PHP 7.0-7.3 disable_functions bypass PoC (*nix only) # # Bug: https://bugs.php.net/bug.php?id=72530 # #

Android – Binder Driver Use-After-Free O seguinte problema existe no ramo android-msm-wahoo-4.4-pie de https://android.googlesource.com/kernel/msm (e possivelmente em outros): Há um uso após a liberação do

Joomla 3.4.6 – ‘configuration.php’ Remote Code Execution # Exploit Title: Joomla 3.4.6 – ‘configuration.php’ Remote Code Execution # Google Dork: N/A # Date: 2019-10-02 #

logrotten 3.15.1 – Privilege Escalation # Exploit Title: logrotten 3.15.1 – Escalonamento de privilégios # Data: 2019-10-04 # Exploit Autor: Wolfgang Hotwagner # Página inicial

Zabbix 4.2 – Authentication Bypass # Exploit Title: Zabbix 4.2 – Authentication Bypass # Date: 2019-10-06 # Exploit Author: Milad Khoshdel # Software Link: https://www.zabbix.com/download

ASX to MP3 converter 3.1.3.7 – ‘.asx’ Local Stack Overflow (DEP) # Exploit Title: ASX to MP3 converter 3.1.3.7 – ‘.asx’ Local Stack Overflow (DEP)

Subrion 4.2.1 – ‘Email’ Persistant Cross-Site Scripting # Title: Subrion 4.2.1 – Script persistente entre sites ‘Email’ # Data: 2019-10-07 # Autor: Min Ko Ko

IBM Bigfix Platform 9.5.9.62 – Arbitrary File Upload   # Exploit Title: IBM Bigfix Platform 9.5.9.62 – Upload de arquivo arbitrário # Data: 2018-12-11 #

CheckPoint Endpoint Security Client/ZoneAlarm 15.4.062.17802 – Privilege Escalation   # Exploit Title: Cliente do CheckPoint Endpoint Security / ZoneAlarm 15.4.062.17802 – Escalonamento de privilégios #