Android suffers from a directory traversal vulnerability leveraged over USB via injection in blkid output.

PostgreSQL version 9.4-0.5.3 suffers from a privilege escalation vulnerability.

IceWarp WebMail versions 12.0.3.1 and below suffer from a cross site scripting vulnerability.

PLC Wireless Router GPN2.4P21-C-CN suffers from a denial of service vulnerability via an unauthenticated remote reboot flaws.

iSmartViewPro version 1.5 suffers from a ‘SavePath for ScreenShots’ buffer overflow vulnerability.

This Metasploit module exploits an unauthenticated directory traversal vulnerability which exits in administration console of Oracle GlassFish Server version 4.1, which is listening by default on port 4848/TCP.