Techsoft WS CMS 2016 Q2 – SQL Injection Web Vulnerability

An independent vulnerability laboratory research team discovered multiple remote sql injection vulnerabilities in the Techsoft Content Management System.

[papers] – Exploiting Buffer Overflows on MIPS Architecture

Exploiting Buffer Overflows on MIPS Architecture

[webapps] – PQI Air Pen Express 6W51-0000R2 and 6W51-0000R2XXX – Multiple Vulnerabilities

PQI Air Pen Express 6W51-0000R2 and 6W51-0000R2XXX – Multiple Vulnerabilities

[dos] – Hexchat IRC Client 2.11.0 – CAP LS Handling Buffer Overflow

Hexchat IRC Client 2.11.0 – CAP LS Handling Buffer Overflow

[dos] – Xion Audio Player <= 1.5 (build 160) – .mp3 Crash PoC

Xion Audio Player <= 1.5 (build 160) – .mp3 Crash PoC

[local] – Hexchat IRC Client 2.11.0 – Directory Traversal

Hexchat IRC Client 2.11.0 – Directory Traversal

WordPress Scoreme Theme – Client Side Cross Site Vulnerability

An independent vulnerability laboratory researcher discovered a cross site scripting vulnerabilities in the WordPress Scoreme Theme.

Axil CMS 3.0 Cross Site Scripting

Axil CMS version 3.0 suffers from a cross site scripting vulnerability.

Axil CMS 0.1 SQL Injection

Axil CMS version 0.1 suffers from a remote SQL injection vulnerability that allows for login bypass.

PHP 5.5.33 Invalid Memory Write

PHP version 5.5.33 suffers from an invalid memory write condition in phar on filename with in the name.