XenForo version 2.1.0 Patch 2 suffers from a cross site scripting vulnerability.
>> ARCHIVE: 2020-08
WordPress Fancybox Lightbox plugin version 1.0.1 suffers from a persistent cross site scripting vulnerability.
Samsung Android suffers from a heap buffer overflow vulnerability and other issues in the Skia Qmage image codec.
This Metasploit module exploits a Java deserialization vulnerability in Apache OFBiz’s unauthenticated XML-RPC endpoint /webtools/control/xmlrpc for versions prior to 17.12.04.
This Metasploit module exploits an authenticated arbitrary command execution vulnerability within the ‘server’ GET parameter of the /uapi-cgi/testaction.cgi page of Geutebruck G-Cam EEC-2xxx and G-Code EBC-21xx, EFD-22xx, ETHC-22xx, and EWPC-22xx…
Savsoft Quiz 5 – Stored Cross-Site Scripting
Pharmacy Medical Store and Sale Point 1.0 – ‘catid’ SQL Injection
https://nsw2.go.th notified by SW1337
QiHang Media Web Digital Signage 3.0.9 – Remote Code Execution (Unauthenticated)
QiHang Media Web Digital Signage 3.0.9 – Unauthenticated Arbitrary File Deletion