>> ARCHIVE: 2020-07

WordPress Email Subscribers and Newsletters plugin versions 4.2.2 and below suffer from a file download vulnerability.

WordPress Email Subscribers and Newsletters plugin version 4.2.2 suffers from a remote SQL injection vulnerability.

Bludit version 3.9.2 suffers from a directory traversal vulnerability.

LibreHealth version 2.0.0 authenticated remote code execution exploit.

MAMP PRO version 4.2.0 suffers from a privilege escalation vulnerability.

This post outlines multiple unsafe practices in Microsoft Windows that can allow for local privilege escalation.

Koken CMS version 0.22.24 suffers from a remote shell upload vulnerability.

Bio Star version 2.8.2 suffers from a local file inclusion vulnerability.

F5 Big-IP versions 13.1.3 Build 0.0.6 and below suffer from a local file inclusion vulnerability.

Sickbeard version 0.1 suffers from a cross site request forgery vulnerability.