>> AUTHOR: deepcore

Rukovoditel version 2.6.1 suffers from a cross site request forgery vulnerability.

WordPress Total Upkeep plugin version 1.14.9 suffers from a backup disclosure vulnerability.

MiniWeb HTTP Server version 0.8.19 buffer overflow proof of concept exploit.

System Explorer version 7.0.0 suffers from an unquoted service path vulnerability.

Macally WIFISD2-2A82 version 2.000.010 guest to root privilege escalation exploit.

Rumble Mail Server version 0.51.3135 suffers from multiple persistent cross site scripting vulnerabilities.

LibreNMS version 1.46 suffers from an authenticated remote SQL injection vulnerability in the MAC Account Graph. Original discovery of SQL injection in this version is attributed to Punt in May…

usrsctp suffers from a usrsctp pending_reply_queue out-of-bounds access vulnerability.

usrsctp suffers from insecure HMAC generation that can lead to out-of-bounds access.