Drupal < 8.6.9 – REST Module Remote Code Execution
Drupal < 8.6.9 – REST Module Remote Code Execution
HanYazilim Paper Submission System .NET version 1.0 suffers from a remote shell upload vulnerability.
Quest NetVault Backup Server versions prior to 11.4.5 suffer from process manager service SQL injection and remote code execution vulnerabilities.
Tautulli version 2.1.26 suffers from a cross site scripting vulnerability.
Drupal < 8.6.10 / < 8.5.11 – REST Module Remote Code Execution
Kanboard version 1.2.7 contains multiple vulnerabilities. The vulnerabilities include CSV account import cross site request forgery which allows an unauthenticated attacker to create a new administrative user. Cross site request…
Advanced Comment System version 1.0 suffers from a cross site scripting vulnerability.
Teracue ENC-400 suffers from hard-coded credential, missing authentication, and command injection vulnerabilities.
VertrigoServ version 2.17 suffers from a cross site scripting vulnerability.
A multitude of security issues exist within STMicroelectronics DVB chipsets including, but not limited to credential leakage, buffer overflow, and data leaks. This is the full release of both the…