Month: January 2018

[local] Parity Browser < 1.6.10 – Bypass Same Origin Policy

[webapps] Joomla! Component Easydiscuss < 4.0.21 – Cross-Site Scripting

[webapps] WordPress Plugin WordPress Download Manager 2.9.60 – Cross-Site Request Forgery

[webapps] Worpress Plugin Service Finder Booking < 3.2 – Local File Disclosure

[webapps] WordPress Plugin CMS Tree Page View 1.4 – Cross-Site Request Forgery / Privilege Escalation

[webapps] WordPress Plugin Admin Menu Tree Page View 2.6.9 – Cross-Site Request Forgery / Privilege Escalation

[webapps] WordPress Plugin Social Media Widget by Acurax 3.2.5 – Cross-Site Request Forgery

[webapps] WordPress Plugin Events Calendar – 'event_id' SQL Injection

[webapps] Muviko 1.1 – SQL Injection

[remote] DiskBoss Enterprise 8.8.16 – Buffer Overflow