Month: April 2019

[local] Apache 2.4.17 < 2.4.38 – 'apache2ctl graceful' 'logrotate' Local Privilege Escalation

[webapps] Bolt CMS 3.6.6 – Cross-Site Request Forgery / Remote Code Execution

[webapps] Jobgator – 'experience' SQL Injection

[local] FlexHEX 2.71 – SEH Buffer Overflow (Unicode)

[webapps] ShoreTel Connect ONSITE < 19.49.1500.0 – Multiple Vulnerabilities

[webapps] SaLICru -SLC-20-cube3(5) – HTML Injection

[remote] QNAP Netatalk < 3.1.12 – Authentication Bypass

[webapps] ManageEngine ServiceDesk Plus 9.3 – User Enumeration

[local] Download Accelerator Plus (DAP) 10.0.6.0 – SEH Buffer Overflow

[webapps] Tradebox CryptoCurrency – 'symbol' SQL Injection