>> ARCHIVE: 2020-05

An independent vulnerability laboratory researcher discovered a blind sql-injection web vulnerability in the official cp…

ManageEngine DataSecurity Plus versions prior to 6.0.1 and ADAudit Plus versions prior to 6.0.3 suffers from a path traversal vulnerability that can lead to remote code execution.

Tiny MySQL suffers from a cross site scripting vulnerability.

Qik Chat version 3.0 for iOS suffers from a command injection vulnerability.

WordPress ChopSlider plugin version 3 suffers from a remote SQL injection vulnerability.

WebTareas version 2.0p8 suffers from a cross site scripting vulnerability.

ManageEngine DataSecurity Plus versions prior to 6.0.1 and ADAudit Plus versions prior to 6.0.3 suffer from an authentication bypass vulnerability.