Piotr Bazydlo (@chudyPB) of watchTowr

PaperCut NG/MF: Remote Code Execution via Scan2Fax

Path traversal via unsanitized upload filename leads to arbitrary file write in Progress ShareFile Storage Zones Controller

Hyland Alfresco Transformation Service Argument Injection RCE

Hyland Alfresco Transformation Service SSRF

Hyland Alfresco Transformation Service Absolute Path Traversal Arbitrary File Read and SSRF

Hyland Alfresco Improper Authorization Arbitrary File Read

Nexus Repository 3 - Cross-Site Scripting

Unsafe Reflection Vulnerability in Telerik UI for ASP.NET AJAX

Kentico Xperience before 13.0.181 allows authenticated users to distribute malicious content (for stored XSS) via certain interactions with the media library file upload feature.

Kentico Xperience before 13.0.178 has a specific set of allowed ContentUploader file extensions for unauthenticated uploads; however, because .zip is processed through TryZipProviderSafe, there is additional functionality to create files with other extens