>> ARCHIVE: 2022-05

ExifTool 12.23 – Arbitrary Code Execution

WordPress Plugin Advanced Uploader 4.2 – Arbitrary File Upload (Authenticated)

Wondershare Dr.Fone 12.0.7 – Privilege Escalation (ElevationService)

Bookeen Notea – Directory Traversal

Wondershare Dr.Fone 12.0.7 – Privilege Escalation (InstallAssistService)

CSZ CMS 1.3.0 – ‘Multiple’ Blind SQLi

Apache CouchDB 3.2.1 – Remote Code Execution (RCE)

UDisk Monitor Z5 Phone – ‘MonServiceUDisk.exe’ Unquoted Service Path

Anuko Time Tracker – SQLi (Authenticated)

Wondershare Dr.Fone 11.4.10 – Insecure File Permissions