Category: Security

[remote] Bookeen Notea – Directory Traversal

[local] Wondershare Dr.Fone 12.0.7 – Privilege Escalation (ElevationService)

[webapps] WordPress Plugin Advanced Uploader 4.2 – Arbitrary File Upload (Authenticated)

[local] ExifTool 12.23 – Arbitrary Code Execution

[webapps] WebTareas 2.4 – Blind SQLi (Authenticated)

[webapps] e107 CMS v3.2.1 – Multiple Vulnerabilities

[webapps] Microfinance Management System 1.0 – 'customer_number' SQLi

[remote] ManageEngine ADSelfService Plus Build 6118 – NTLMv2 Hash Exposure

[webapps] TLR-2005KSH – Arbitrary File Upload

[webapps] Gitlab 14.9 – Authentication Bypass