Mercusys Mercury X18G Path Traversal Vulnerability (CNVD-2021-02626)

The Mercusys Mercury X18G is a router from the Chinese company Mercusys. A security vulnerability exists in the Mercusys Mercury X18G that allows remote attackers to exploit the vulnerability by submitting a special /loginLess/ request that can read sensitive information...

PYSEC-2019-254

In Tautulli 2.1.9, CSRF in the /shutdown URI allows an attacker to shut down the remote media server. Also, anonymous access can be achieved in applications that do not have a user login area...