Author: Cyberthreat Blog

Bolt CMS 3.2.14 allows stored XSS by uploading an SVG document with a “Content-Type: image/svg+xml” header.

The shoco_decompress function in the API in shoco through 2017-07-17 allows remote attackers to cause a denial of service (buffer over-read and application crash) via malformed compressed data.

An FR-GV-303 issue in FreeRADIUS 3.x before 3.0.15 allows “DHCP – Infinite read in dhcp_attr2vp()” and a denial of service.

An FR-GV-204 issue in FreeRADIUS 2.x before 2.2.10 allows “DHCP – Memory leak in fr_dhcp_decode()” and a denial of service.

Inteno routers have a JUCI ACL misconfiguration that allows the “user” account to read files, write to files, and add root SSH keys via JSON commands to ubus. (Exploitation is sometimes easy because the...