qBittorrent Command Injection Vulnerability

qBittorrent is a cross-platform lightweight BitTorrent client. A command injection vulnerability exists in the 'Application::runExternalProgram' function of the app/application.cpp file in qBittorren versions prior to 4.1.7. The vulnerability stems from a network system or product not properly...

CVE-2018-19877

login.php in Adiscon LogAnalyzer before 4.1.7 has XSS via the Login Button Referer field...