>> CATEGORY: exploit

GLPI version 0.90.4 suffers from a remote SQL injection vulnerability.

The mp4ff_read_stsd function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) version 2.7 can cause a denial of service (invalid memory read and application crash) via a crafted mp4…

This exploit leverages an MTA handler remote code execution vulnerability in Microsoft Word.

WordPress Ultimate Product Catalogue plugin version 4.2.2 suffers from a remote SQL injection vulnerability.

FASM (Flat Assembler) versions 1.7.21 and below suffer from a buffer overflow vulnerability.

PHPMailer versions prior to 5.2.23 suffer from a cross site scripting vulnerability.

Telegram version 4.0.1 suffers from a two-factor authentication bypass vulnerability.

D-Link DIR-100 suffers from brute force and cross site request forgery vulnerabilities.

NTFS version 3.1 master file table denial of service exploit.