Month: October 2019

[webapps] WordPress 5.2.4 – Cross-Origin Resource Sharing

[local] Intelligent Security System SecurOS Enterprise 10.2 – 'SecurosCtrlService' Unquoted Service Path

[webapps] rConfig 3.9.2 – Remote Code Execution

[dos] WebKit – Universal XSS in HTMLFrameElementBase::isURLAllowed

[local] ChaosPro 2.0 – Buffer Overflow (SEH)

[webapps] delpino73 Blue-Smiley-Organizer 1.32 – 'datetime' SQL Injection

[local] JumpStart 0.6.0.0 – 'jswpbapi' Unquoted Service Path

[webapps] waldronmatt FullCalendar-BS4-PHP-MySQL-JSON 1.21 – 'description' Cross-Site Scripting

[webapps] waldronmatt FullCalendar-BS4-PHP-MySQL-JSON 1.21 – 'start' SQL Injection

[webapps] Part-DB 0.4 – Authentication Bypass