Month: January 2020

[webapps] Satellian 1.12 – Remote Code Execution

[local] Microsoft Windows 10 – Theme API 'ThemePack' File Parsing

[webapps] Cups Easy 1.0 – Cross Site Request Forgery (Password Reset)

[local] XMLBlueprint 16.191112 – XML External Entity Injection

[webapps] Liferay CE Portal 6.0.2 – Remote Command Execution

[webapps] Kibana 6.6.1 – CSV Injection

[dos] macOS/iOS ImageIO – Heap Corruption when Processing Malformed TIFF Image

[webapps] Centreon 19.10.5 – Database Credentials Disclosure

[webapps] Octeth Oempro 4.8 – 'CampaignID' SQL Injection

[webapps] Adive Framework 2.0.8 – Cross-Site Request Forgery (Change Admin Password)