>> ARCHIVE: 2018-04

Frog CMS 0.9.5 – Persistent Cross-Site Scripting

Jfrog Artifactory < 4.16 – Unauthenticated Arbitrary File Upload / Remote Command Execution

SickRage < v2018.03.09 – Clear-Text Credentials HTTP Response

GitList 0.6 – Unauthenticated Remote Code Execution

MyBB Threads to Link Plugin 1.3 – Cross-Site Scripting

Allok AVI to DVD SVCD VCD Converter 4.0.1217 – Buffer Overflow (SEH)

October CMS User Plugin 1.4.5 – Persistent Cross-Site Scripting

TP-Link Technologies TL-WA850RE Wi-Fi Range Extender – Unauthenticated Remote Reboot

WordPress Plugin WP with Spritz 1.0 – Remote File Inclusion