>> ARCHIVE: 2019-10

WordPress 5.2.4 – Cross-Origin Resource Sharing

Intelligent Security System SecurOS Enterprise 10.2 – ‘SecurosCtrlService’ Unquoted Service Path

rConfig 3.9.2 – Remote Code Execution

WebKit – Universal XSS in HTMLFrameElementBase::isURLAllowed

ChaosPro 2.0 – Buffer Overflow (SEH)

delpino73 Blue-Smiley-Organizer 1.32 – ‘datetime’ SQL Injection

JumpStart 0.6.0.0 – ‘jswpbapi’ Unquoted Service Path

waldronmatt FullCalendar-BS4-PHP-MySQL-JSON 1.21 – ‘description’ Cross-Site Scripting

waldronmatt FullCalendar-BS4-PHP-MySQL-JSON 1.21 – ‘start’ SQL Injection

Part-DB 0.4 – Authentication Bypass