Month: April 2018

[webapps] iScripts Easycreate 3.2.1 – Stored Cross-Site Scripting

[dos] CyberArk Password Vault < 9.7 / < 10 – Memory Disclosure

[local] H2 Database – 'Alias' Arbitrary Code Execution

[webapps] CyberArk Password Vault Web Access < 9.9.5 / < 9.10 / 10.1 – Remote Code Execution

[webapps] MyBB Plugin Recent Threads On Index – Cross-Site Scripting

[webapps] KYOCERA Multi-Set Template Editor 3.4 – Out-Of-Band XML External Entity Injection

[webapps] Yahei PHP Prober 0.4.7 – Cross-Site Scripting

[webapps] WolfCMS 0.8.3.1 – Cross Site Request Forgery

[webapps] Cobub Razor 0.7.2 – Add New Superuser Account