Category: Security

[local] Sync Breeze Enterprise 12.4.18 – 'Sync Breeze Enterprise' Unquoted Service Path

[local] Disk Sorter Enterprise 12.4.16 – 'Disk Sorter Enterprise' Unquoted Service Path

[webapps] WordPress InfiniteWP – Client Authentication Bypass (Metasploit)

[local] Disk Savvy Enterprise 12.3.18 – Unquoted Service Path

[local] Wedding Slideshow Studio 1.36 – 'Name' Buffer Overflow

[remote] OpenSMTPD 6.4.0 < 6.6.1 – Local Privilege Escalation + Remote Code Execution

[local] Wedding Slideshow Studio 1.36 – 'Key' Buffer Overflow

[webapps] Forcepoint WebSecurity 8.5 – Reflective Cross-Site Scripting

[webapps] LearnDash WordPress LMS Plugin 3.1.2 – Reflective Cross-Site Scripting

[local] Windscribe – WindscribeService Named Pipe Privilege Escalation (Metasploit)