>> CATEGORY: Security

XMLBlueprint 16.191112 – XML External Entity Injection

Cups Easy 1.0 – Cross Site Request Forgery (Password Reset)

Microsoft Windows 10 – Theme API ‘ThemePack’ File Parsing

Satellian 1.12 – Remote Code Execution

Centreon 19.10.5 – ‘Pollers’ Remote Command Execution

Centreon 19.10.5 – Remote Command Execution

Adive Framework 2.0.8 – Cross-Site Request Forgery (Change Admin Password)

Octeth Oempro 4.8 – ‘CampaignID’ SQL Injection

Centreon 19.10.5 – Database Credentials Disclosure

macOS/iOS ImageIO – Heap Corruption when Processing Malformed TIFF Image