Category: Security

[local] MSI Packages Symbolic Links Processing – Windows 10 Privilege Escalation

[webapps] Ice HRM 26.2.0 – Cross-Site Request Forgery (Add User)

[local] DHCP Turbo 4.61298 – 'DHCP Turbo 4' Unquoted Service Path

[webapps] WordPress Theme Fruitful 3.8 – Persistent Cross-Site Scripting

[local] TFTP Turbo 4.6.1273 – 'TFTP Turbo 4' Unquoted Service Path

[webapps] SOPlanning 1.45 – Cross-Site Request Forgery (Add User)

[local] BOOTP Turbo 2.0.1214 – 'BOOTP Turbo' Unquoted Service Path

[webapps] Avaya Aura Communication Manager 5.2 – Remote Code Execution

[webapps] SOPlanning 1.45 – 'users' SQL Injection

[local] Cuckoo Clock v5.0 – Buffer Overflow