Western Digital MyCloud – ‘multi_uploadify’ File Upload (Metasploit)
>> ARCHIVE: 2017-12
Western Digital MyCloud – ‘multi_uploadify’ File Upload (Metasploit)
Outlook for Android – Attachment Download Directory Traversal
Joomla! Component User Bench 1.0 – ‘userid’ SQL Injection
Zoom Linux Client 2.0.106600.0904 – Stack-Based Buffer Overflow
Joomla! Component JB Visa 1.0 – ‘visatype’ SQL Injection
Joomla! Component Guru Pro – ‘promocode’ SQL Injection
Monstra CMS 3.0.4 – Arbitrary File Upload / Remote Code Execution
Apple Security Advisory 2017-12-13-3 – iCloud for Windows 7.2 is now available and addresses code execution and privacy issues.
Apple Security Advisory 2017-12-13-4 – iTunes 12.7.2 for Windows is now available and addresses code execution and privacy issues.
Apple Security Advisory 2017-12-13-6 – iOS 11.2 addresses issues relating to interception, memory corruption, and more. This advisory provides additional information for APPLE-SA-2017-12-6-2.