[webapps] Spring Data REST < 2.6.9 (Ingalls SR9), 3.0.1 (Kay SR1) – PATCH Request Remote Code Execution
Spring Data REST < 2.6.9 (Ingalls SR9), 3.0.1 (Kay SR1) – PATCH Request Remote Code Execution
Tags: 0day, remote exploit[webapps] WordPress Plugin Duplicator 1.2.32 – Cross-Site Scripting
Hola VPN 1.79.859 Insecure Service Permissions
Hola VPN version 1.79.859 suffers from an insecure service permission vulnerability.
10-Strike Network Monitor 5.4 Unquoted Service Path
10-Strike Network Monitor version 5.4 suffers from an unquoted service path vulnerability.
Panda Global Security 17.0.1 Unquoted Service Path
Panda Global Security version 17.0.1 suffers from an unquoted service path vulnerability.
WPS Free Office 10.2.0.5978 NULL DACL Grants Full Access
WPS Free Office version 10.2.0.5978 allows local users to gain privileges or cause a denial of service by impersonating all the pipes through the use of an insecurely created named pipe.
Panda Global Security 17.0.1 NULL DACL Grants Full Access
Panda Global Security version 17.0.1 allows local users to gain privileges or cause a denial of service by impersonating all the pipes through the use of an insecurely created named pipe.
Tuleap 9.17.99.189 SQL Injection
Tuleap version 9.17.99.189 suffers from a remote SQL injection vulnerability.
Bacula-Web SQL Injection
Bacula-Web versions prior to 8.0.0-RC2 suffer from multiple remote SQL injection vulnerabilities.