>> ARCHIVE: 2018-09

PDF Explorer version 1.5.66.2 denial of service proof of concept exploit.

iCash version 7.6.5 denial of service proof of concept exploit.

Rubedo CMS version 3.4.0 suffers from a directory traversal vulnerability.

CirCarLife SCADA version 4.3.0 suffers from a credential disclosure vulnerability.

Bayanno Hospital Management System version 4.0 suffers from a cross site scripting vulnerability.

There is a variety of RPC communication channels between the Chrome OS host system and the crosvm guest. This bug report focuses on communication on TCP port 8889, which is…

Tor Browser versions prior to 8.0 are affected by an information disclosure vulnerability that allows remote attackers to bypass the intended anonymity feature and discover a client IP address. The…

Seagate Personal Cloud is a consumer-grade Network-Attached Storage device (NAS). It was found that the web application used to manage the NAS is affected by various unauthenticated information disclosure vulnerabilities….

HiScout GRC Suite versions prior to 3.1.5 suffer from a file upload vulnerability. An authenticated attacker with the permission to edit or add a “WebSiteElement” to the “content” pages is…

Wisetail Learning Ecosystem (LE) versions up to 4.11.6 suffer from multiple insecure direct object reference vulnerabilities that allow an attacker to download files and get access to the non-purchased course…