An independent vulnerability laboratory researcher discovered an application-side web vulnerability in the official Ubiquiti Networks airCRM online service web-application.
>> AUTHOR: deepcore
BlackBerry Enterprise Service < 12.4 (BES12) Self-Service – Multiple Vulnerabilities
Core FTP Server 1.2 – Buffer Overflow PoC
InstantCoder 1.0 iOS – Multiple Vulnerabilities
Drupal version 8.0.x-dev suffers from a cross site scripting vulnerability on IE8 and older versions.
Thru Managed File Transfer Portal version 9.0.2 suffers from a remote SQL injection vulnerability.
Thru Managed File Transfer Portal version 9.0.2 suffers from a cross site scripting vulnerability.
PEAR LiveUser < 0.16.8 – Arbitrary File Access
Chamilo LMS suffers from a persistent cross site scripting vulnerability.
Chamilo LMS suffers from an insecure direct object reference vulnerability.