Month: May 2022

[local] ExifTool 12.23 – Arbitrary Code Execution

[webapps] WordPress Plugin Advanced Uploader 4.2 – Arbitrary File Upload (Authenticated)

[local] Wondershare Dr.Fone 12.0.7 – Privilege Escalation (ElevationService)

[remote] Bookeen Notea – Directory Traversal

[local] Wondershare Dr.Fone 12.0.7 – Privilege Escalation (InstallAssistService)

[webapps] CSZ CMS 1.3.0 – 'Multiple' Blind SQLi

[remote] Apache CouchDB 3.2.1 – Remote Code Execution (RCE)

[local] UDisk Monitor Z5 Phone – 'MonServiceUDisk.exe' Unquoted Service Path

[webapps] Anuko Time Tracker – SQLi (Authenticated)

[local] Wondershare Dr.Fone 11.4.10 – Insecure File Permissions