Month: October 2014

[dos] – Binary File Descriptor Library (libbfd) – Out-of-Bounds Crash

[local] – Free WMA MP3 Converter 1.8 (.wav) – Buffer Overflow

[webapps] – WebDisk+ 2.1 iOS – Code Execution Vulnerability

[webapps] – Folder Plus 2.5.1 iOS – Persistent XSS Vulnerability

[webapps] – HP Operations Agent Remote XSS iFrame Injection

[webapps] – vBulletin 4.x Verify Email Before Registration Plugin – SQL Injection

[remote] – Ammyy Admin 3.5 – RCE

[webapps] – Change CMS 3.6.8 – Multiple CSRF Vulnerabilities

[webapps] – HttpCombiner ASP.NET – Remote File Disclosure Vulnerability

[webapps] – Axway Secure Transport 5.1 SP2 – Arbitary File Upload via CSRF