>> ARCHIVE: 2018-07

Super CMS Blog Pro PHP Script version 1.0 suffers from a cross site scripting vulnerability.

ProjectSend version R1053 suffers from a remote SQL injection vulnerability.

Responsive Filemanager version 9.13.1 suffers from a server-side request forgery vulnerability.

Allok MOV Converter version 4.6.1217 suffers from a buffer overflow vulnerability.

ipPulse version 1.92 suffers from a denial of service vulnerability.

Microsoft Windows Kernel win32k!NtUserConsoleControl denial of service proof of concept exploit.

H2 Database version 1.4.197 suffers from an information disclosure vulnerability.

It is possible to bypass fusermount’s restrictions on the use of the “allow_other” mount option as follows if SELinux is active.

Charles Proxy version 4.2 suffers from a local root privilege escalation vulnerability.

Microsoft Wireless Display Adapter versions 2.0.8350 to 2.0.8372 suffer from command injection, broken access control, and evil twin attack vulnerabilities.