Month: December 2017

[remote] Western Digital MyCloud – 'multi_uploadify' File Upload (Metasploit)

[remote] Outlook for Android – Attachment Download Directory Traversal

[webapps] Joomla! Component User Bench 1.0 – 'userid' SQL Injection

[dos] Zoom Linux Client 2.0.106600.0904 – Stack-Based Buffer Overflow

[webapps] Joomla! Component JB Visa 1.0 – 'visatype' SQL Injection

[webapps] Joomla! Component Guru Pro – 'promocode' SQL Injection

[webapps] Monstra CMS 3.0.4 – Arbitrary File Upload / Remote Code Execution