Zimbra versions prior to 8.8.1 suffer from XML external entity injection and server-side request forgery vulnerabilities.
WordPress Satoshi theme version 2.0 suffers from cross site request forgery and remote file upload vulnerabilities.
Supra Smart Cloud TV suffers from an openLiveURL() remote file inclusion vulnerability.
Microsoft Windows – AppX Deployment Service Local Privilege Escalation (3)
Linux/x86_64 – Bind (4444/TCP) Shell (/bin/sh) Shellcode (131 bytes)
http://www.srasaming.go.th//../data/mah(5).gif notified by Wissem Mahfoud
Supra Smart Cloud TV – ‘openLiveURL()’ Remote File Inclusion
Rapid7 Windows InsightIDR Agent version 2.6.3.14 suffers from a local privilege escalation vulnerability.
TestLink versions 1.9.19 and below suffers from a server side request forgery vulnerability.
Dell KACE System Management Appliance (SMA) versions prior to 9.0.270 patch SEC2018_20180410 suffers from cross site scripting and remote SQL injection vulnerabilities.