Hyperoptic (Tilgin) routers versions HG2330, HG2302, and HG2301 suffer from cross site request forgery and cross site scripting vulnerabilities.
>> ARCHIVE: 2016-06
The fix applied for CVE-2014-1520 does not fix a DLL hijacking issue with Mozilla Firefox’s executable installer.
Joomla En-Masse component versions 5.1 through 6.4 suffer from a remote SQL injection vulnerability.
BookingWizz versions prior to 5.5 suffer from having default administrative credentials, local file inclusion, cross site request forgery, cross site scripting, and remote SQL injection vulnerabilities.
http://www.e-learning.dss.go.th notified by r00tkit
Bomgar Remote Support Unauthenticated Code Execution (msf)
Ultrabenosaurus ChatBoard – Stored XSS
Joomla En Masse (com_enmasse) Component 5.1 – 6.4 – SQL Injection
w2wiki – Multiple XSS Vulnerabilities