http://don.go.th/asu.php notified by MR.COLT
CSE Bookstore 1.0 Cross Site Scripting
CSE Bookstore version 1.0 suffers from a persistent cross site scripting vulnerability.
DedeCMS 5.8 Cross Site Scripting
DedeCMS version 5.8 suffers from a cross site scripting vulnerability.
Agent Tesla Botnet Cross Site Scripting
Agent Tesla Botnet suffers from a cross site scripting vulnerability.
Citadel WebCit Session Hijacking
Citadel WebCit versions prior to 926 suffer from a session hijacking vulnerability.
Wondershare Dr.Fone 3.0.0 Unquoted Service Path
Wondershare Dr.Fone version 3.0.0 suffers from an unquoted service path vulnerability.
Simple College Website 1.0 Code Execution / SQL Injection
Simple College Website version 1.0 suffers from code execution and remote SQL injection vulnerabilities.
Microsoft Windows Kernel cng.sys Buffer Overflow
The Microsoft Windows Kernel Cryptography Driver (cng.sys) exposes a DeviceCNG device to user-mode programs and supports a variety of IOCTLs with non-trivial input structures. It constitutes a locally accessible attack surface that can be exploited for privilege escalation (such as sandbox escape).
Online Examination System 1.0 Cross Site Scripting
Online Examination System version 1.0 suffers from a persistent cross site scripting vulnerability.