>> CATEGORY: Security

WordPress Plugin UserPro 4.9.32 – Cross-Site Scripting

Exim 4.87 / 4.91 – Local Privilege Escalation (Metasploit)

Nimble Streamer 3.0.2-2 < 3.5.4-9 – Directory Traversal

Pulse Secure 8.1R15.1/8.2/8.3/9.0 SSL VPN – Arbitrary File Disclosure (metasploit)

WordPress Add Mime Types Plugin 2.2.1 – Cross-Site Request Forgery

Kimai 2 – Persistent Cross-Site Scripting

FortiOS 5.6.3 – 5.6.7 / FortiOS 6.0.0 – 6.0.4 – Credentials Disclosure (Metasploit)

FortiOS 5.6.3 – 5.6.7 / FortiOS 6.0.0 – 6.0.4 – Credentials Disclosure

Neo Billing 3.5 – Persistent Cross-Site Scripting

RAR Password Recovery 1.80 – ‘User Name and Registration Code’ Denial of Service