PerfexCRM 1.9.7 – Arbitrary File Upload
>> ARCHIVE: 2018-01
PerfexCRM 1.9.7 – Arbitrary File Upload
ImgHosting 1.5 – Cross-Site Scripting
pfSense < 2.1.4 – 'status_rrd_graph_img.php' Command Injection
http://pni.go.th/index.html notified by ZoRRoKiN
http://phonchan.go.th/cok.htm notified by ./cOLI
ALLMediaServer version 0.95 stack buffer overflow exploit with DEP bypass on Windows 7 x64.
D-Link routers 110/412/615/815 versions prior to 1.03 suffer from a service.cgi arbitrary code execution vulnerability.
SAP NetWeaver J2EE Engine version 7.40 suffers from a remote SQL injection vulnerability.
macOS suffers from a process_policy stack leak through an uninitialized field.
eBPF had the verifier bug backported to version 4.9-stable.