IDOR on ProConf Peer-Review and Conference Management versions 6.0 and below suffer from an insecure direct object reference vulnerability that allows for file disclosure.
DokuWiki version 2018-04-22a Greebo suffers from a CSV formula injection vulnerability that allows for arbitrary code execution.
This Metasploit module exploits a -dSAFER bypass in Ghostscript to execute arbitrary commands by handling a failed restore (grestore) in PostScript to disable LockSafetyParams and avoid invalidaccess. This vulnerability is…
Softneta MedDream PACS Server Premium 6.7.1.1 – Directory Traversal
iSmartViewPro 1.5 – ‘SavePath for ScreenShots’ Local Buffer Overflow (SEH)
QNAP Photo Station 5.7.0 – Cross-Site Scripting
DVD Photo Slideshow Professional 8.07 – Buffer Overflow (SEH)
Tenable WAS-Scanner 7.4.1708 – Remote Command Execution
MedDream PACS Server Premium 6.7.1.1 – ’email’ SQL Injection
Microsoft Windows Explorer suffers from an out-of-bounds read denial of service vulnerability.