>> CATEGORY: exploit

Halliburton LogView Pro version 9.7.5 crash proof of concept exploit.

mySCADAPro version 7 suffers from a local privilege escalation vulnerability.

DMA Radius Manager versions 4.1.5 and below suffer from a cross site request forgery vulnerability.

WordPress ALO EasyMail Newsletter plugin version 2.9.2 suffers from a cross site request forgery vulnerability.

The login component of the Polycom Command Shell on Polycom HDX video endpints, running software versions 3.0.5 and earlier, is vulnerable to an authorization bypass when simultaneous connections are made…

WordPress WangGuard plugin version 1.7.1 suffers from a cross site scripting vulnerability.

WordPress Uji Countdown plugin version 2.0.6 suffers from a cross site scripting vulnerability.

Zoll ePCR version 2.6.4 suffers from a malicious script insertion vulnerability.

Docebo LMS version 6.9 suffers from a remote code execution vulnerability.

Multiple versions of FortiManager allows for malicious script insertion attacks.