>> ARCHIVE: 2020-11

M/Monit 3.7.4 – Password Disclosure

Gemtek WVRTM-127ACN 01.01.02.141 – Authenticated Arbitrary Command Injection

TestBox CFML Test Framework 4.1.0 – Directory Traversal

TestBox CFML Test Framework 4.1.0 – Arbitrary File Write and Remote Code Execution

Genexis Platinum 4410 Router 2.1 – UPnP Credential Exposure

Gitlab 12.9.0 – Arbitrary File Read (Authenticated)

xuucms 3 – ‘keywords’ SQL Injection

Fortinet FortiOS 6.0.4 – Unauthenticated SSL VPN User Password Modification

M/Monit 3.7.4 – Privilege Escalation