Category: Security

[webapps] TwonkyMedia Server 7.0.11-8.5 – Directory Traversal

[webapps] Open-AuditIT Professional 2.1 – Cross-Site Scripting

[webapps] ClipBucket – beats_uploader Unauthenticated Arbitrary File Upload (Metasploit)

[remote] TestLink Open Source Test Management < 1.9.16 – Remote Code Execution (PoC)

[local] LabF nfsAxe 3.7 – Privilege Escalation

[webapps] Laravel Log Viewer < 0.13.0 – Local File Download

[remote] Acrolinx Server < 5.2.5 – Directory Traversal

[dos] Android Bluetooth – BNEP BNEP_SETUP_CONNECTION_REQUEST_MSG Out-of-Bounds Read

[dos] Android Bluetooth – BNEP bnep_data_ind() Remote Heap Disclosure

[dos] WM Recorder 16.8.1 – Denial of Service