>> CATEGORY: Security

Microsoft SharePoint Server 2019 – Remote Code Execution

QiHang Media Web Digital Signage 3.0.9 – Cleartext Credential Disclosure

QiHang Media Web Digital Signage 3.0.9 – Unauthenticated Arbitrary File Deletion

QiHang Media Web Digital Signage 3.0.9 – Remote Code Execution (Unauthenticated)

Artica Proxy 4.3.0 – Authentication Bypass

GetSimple CMS Plugin Multi User 1.8.2 – Cross-Site Request Forgery (Add Admin)

vBulletin 5.6.2 – ‘widget_tabbedContainer_tab_panel’ Remote Code Execution

CMS Made Simple 2.2.14 – Authenticated Arbitrary File Upload

Fuel CMS 1.4.7 – ‘col’ SQL Injection (Authenticated)

Warehouse Inventory System 1.0 – Cross-Site Request Forgery (Change Admin Password)