Month: October 2016

Yasir Portal 5.0 Portal Scripti Database Disclosure

XhP CMS 0.5.1 Cross Site Request Forgery / Cross Site Scripting

Windows NtLoadKeyEx Read Only Hive Arbitrary File Write Privilege Escalation

Windows Edge/IE Isolated Private Namespace Insecure Boundary Descriptor Privilege Escalation

Windows Edge/IE Isolated Private Namespace Insecure DACL Privilege Escalation

SPIP 3.1.2 Cross Site Request Forgery

SPIP 3.1.2 Cross Site Scripting

SPIP 3.1.2 File Enumeration / Path Traversal

ManageEngine ServiceDesk Plus 9.2 Build 9207 Information Disclosure

WineBottler 1.8-rc4 Man-In-The-Middle / Code Execution