>> CATEGORY: exploit

PHP Press Release suffers from a stored cross site scripting vulnerability.

Phire CMS versions 2.0.0 and below suffer from multiple cross site scripting vulnerabilities.

PHP Press Release suffers from a cross site request forgery vulnerability.

Wolf CMS version 0.8 suffers from a stored cross site scripting vulnerability.

Deal Flow Network version 7.0 suffers from a cross site scripting vulnerability.

Android devices can be crashed remotely forcing a halt and then a soft reboot by a MITM attacker manipulating assisted GPS/GNSS data provided by Qualcomm. This issue affects the open…

ZendStudio IDE version 13.5.1 suffers from a privilege escalation vulnerability.

HP Client Automation remote command injection exploit that adds backdoor accounts and provides a reverse shell. Author tested on version 7.9 but believes it should also work on 8.1, 9.0,…

Apache Tomcat versions 8, 7, and 6 suffer from a privilege escalation vulnerability on RedHat-based distros.

Fitbit Connect Service suffers from an unquoted service path privilege escalation vulnerability.