Mango Automation version 2.6.0 file upload and arbitrary JSP code execution cross site request forgery exploit.
Collabtive version 2.0 suffers from an arbitrary file upload vulnerability.
ProjeQtor version 4.5.2 suffers from a remote shell upload vulnerability.
WordPress Appointment Booking Calendar plugin version 1.1.7 suffers from multiple cross site scripting vulnerabilities.
Centreon version 2.6.1 suffers from a remote shell upload vulnerability.
IconLover 5.42 – Local Buffer Overflow Exploit
Western Digital My Cloud 04.01.03-421, 04.01.04-422 – Command Injection
ManageEngine EventLog Analyzer Remote Code Execution
Ubuntu Apport – Local Privilege Escalation
Kaseya Virtual System Administrator – Multiple Vulnerabilities