The Cisco ASA VPN Portal password recovery page suffers from a cross site scripting vulnerability.
>> AUTHOR: deepcore
Inductive Automation Ignition 7.8.1 Remote Leakage Of Shared Buffers
DirectAdmin 1.491 – CSRF Vulnerability
Vesta Control Panel <= 0.9.8-15 – Persistent XSS Vulnerability
ADOdb < 4.71 – Cross Site Scripting
A persistent cross site scripting vulnerability has been discoverd in the official web-application Product Chamilo LMS.
The Vulnerability Laboratory Core Research Team discovered an application-side input validation web vulnerability in the official ifixit online service web-application.
Ntpd versions ntp-4.2.6p5 and below ctl_putdata() buffer overflow exploit.
Manage Engine OPutils version 8.0 suffers from a privilege escalation vulnerability.