>> ARCHIVE: 2019-04

Apache 2.4.17 < 2.4.38 – 'apache2ctl graceful' 'logrotate' Local Privilege Escalation

Bolt CMS 3.6.6 – Cross-Site Request Forgery / Remote Code Execution

Jobgator – ‘experience’ SQL Injection

FlexHEX 2.71 – SEH Buffer Overflow (Unicode)

ShoreTel Connect ONSITE < 19.49.1500.0 – Multiple Vulnerabilities

SaLICru -SLC-20-cube3(5) – HTML Injection

QNAP Netatalk < 3.1.12 – Authentication Bypass

ManageEngine ServiceDesk Plus 9.3 – User Enumeration

Download Accelerator Plus (DAP) 10.0.6.0 – SEH Buffer Overflow

Tradebox CryptoCurrency – ‘symbol’ SQL Injection