>> ARCHIVE: 2018-10

PHP-SHOP Master version 1.0 suffers from a cross site request forgery vulnerability.

OwnTicket version 1.0 suffers from a remote SQL injection vulnerability.

Any Sound Recorder version 2.93 SEH buffer overflow proof of concept exploit.

Time and Expense Management System version 3.0 suffers from a cross site request forgery vulnerability.

This write up provides a proof of concept with technical details for the git submodule arbitrary code execution vulnerability.

LANGO Codeigniter Multilingual Script version 1.0 suffers from html injection and cross site scripting vulnerabilities.

Ekushey Project Manager CRM version 3.1 suffers from a persistent cross site scripting vulnerability.

TP-Link TL-SC3130 version 1.6.18 suffers from an unauthenticated and unauthorized live RTSP stream disclosure.

Multiple D-Link router models suffer from code execution, plain-text password storage, and directory traversal vulnerabilities.