Category: Security

[webapps] Ajenti 2.1.31 – Remote Code Exection (Metasploit)

[webapps] Citrix StoreFront Server 7.15 – XML External Entity Injection

[webapps] iSeeQ Hybrid DVR WH-H4 2.0.0.P – (get_jpeg) Stream Disclosure

[dos] WMV to AVI MPEG DVD WMV Convertor 4.6.1217 – Denial of Service

[dos] JavaScriptCore – GetterSetter Type Confusion During DFG Compilation

[webapps] rConfig 3.9.2 – Remote Code Execution

[local] Intelligent Security System SecurOS Enterprise 10.2 – 'SecurosCtrlService' Unquoted Service Path

[webapps] WordPress 5.2.4 – Cross-Origin Resource Sharing

[remote] Microsoft Windows Server 2012 – 'Group Policy' Remote Code Execution

[remote] Microsoft Windows Server 2012 – 'Group Policy' Security Feature Bypass