[local] Wondershare Dr.Fone 11.4.10 – Insecure File Permissions
Posted by deepcore under Security (No Respond)
[webapps] Anuko Time Tracker – SQLi (Authenticated)
Posted by deepcore under Security (No Respond)
[local] UDisk Monitor Z5 Phone – 'MonServiceUDisk.exe' Unquoted Service Path
Posted by deepcore under Security (No Respond)
[remote] Apache CouchDB 3.2.1 – Remote Code Execution (RCE)
Posted by deepcore under Security (No Respond)
[webapps] CSZ CMS 1.3.0 – 'Multiple' Blind SQLi
Posted by deepcore under Security (No Respond)
[local] Wondershare Dr.Fone 12.0.7 – Privilege Escalation (InstallAssistService)
Posted by deepcore under Security (No Respond)
[remote] Bookeen Notea – Directory Traversal
Posted by deepcore under Security (No Respond)
[local] Wondershare Dr.Fone 12.0.7 – Privilege Escalation (ElevationService)
Posted by deepcore under Security (No Respond)
[webapps] WordPress Plugin Advanced Uploader 4.2 – Arbitrary File Upload (Authenticated)
Posted by deepcore under Security (No Respond)
WordPress Plugin Advanced Uploader 4.2 – Arbitrary File Upload (Authenticated)
Tags: 0day, remote exploit[local] ExifTool 12.23 – Arbitrary Code Execution
Posted by deepcore under Security (No Respond)