Month: February 2019

[dos] Oracle Java Runtime Environment – Heap Out-of-Bounds Read During OTF Font Rendering in glyph_CloseContour

[webapps] Comodo Dome Firewall 2.7.0 – Cross-Site Scripting

[webapps] Apache CouchDB 2.3.0 – Cross-Site Scripting

[webapps] ArangoDB Community Edition 3.4.2-1 – Cross-Site Scripting

[webapps] M/Monit 3.7.2 – Privilege Escalation

[webapps] Webiness Inventory 2.3 – 'ProductModel' Arbitrary File Upload

[webapps] CMSsite 1.0 – 'post' SQL Injection

[dos] NBMonitor 1.6.5.0 – 'Key' Denial of Service (PoC)

[webapps] Master IP CAM 01 3.3.4.2103 – Remote Command Execution

[webapps] MISP 2.4.97 – SQL Command Execution via Command Injection in STIX Module