Category: Security

[dos] BearFTP 0.1.0 – 'PASV' Denial of Service

[webapps] phpList 3.5.0 – Authentication Bypass

[webapps] ira 8.3.4 – Information Disclosure (Username Enumeration)

[webapps] Schneider Electric U.Motion Builder 1.3.4 – Authenticated Command Injection

[dos] P2PWIFICAM2 for iOS 10.4.1 – 'Camera ID' Denial of Service (PoC)

[webapps] Lotus Core CMS 1.0.1 – Local File Inclusion

[remote] OpenSMTPD 6.6.2 – Remote Code Execution

[webapps] rConfig 3.9.3 – Authenticated Remote Code Execution

[webapps] Kibana 6.6.1 – CSV Injection

[webapps] Liferay CE Portal 6.0.2 – Remote Command Execution