>> CATEGORY: exploit

Microix Timesheet module suffers from a remote SQL injection vulnerability.

Matrimonial Website Script version 1.0.2 suffers from a remote SQL injection vulnerability.

Zortam MP3 Studio version 21.15 suffers from an insecure file permission privilege escalation vulnerability.

RealEstate CMS version 3.00.50 suffers from a cross site scripting vulnerability.

Wise Care 365 version 4.27 and Wise Disk Cleaner version 9.29 suffer from an unquoted service path privilege escalation vulnerability.

Kerberos in Microsoft Windows suffers from a security feature bypass vulnerability.

There is a crash when the AVC decoder in Adobe Flash attempts to free memory, likely indicating memory corruption.

The NtLoadKeyEx system call allows an unprivileged user to load registry hives outside of the RegistryA hidden attachment point which can be used to elevate privileges.

3GP Player version 4.7.0 suffers from a dll hijacking vulnerability.

SELinux suffers from a protection bypass that allows for a memory mapping that is both readable and writable.