Medical Hub Directory Site version 1.0 suffers from a remote SQL injection vulnerability.
>> CATEGORY: exploit
PostgreSQL versions 9.3 through 11.7 remote code execution exploit.
Kramer VIAware version 2.5.0719.1034 suffers from a remote code execution vulnerability.
WordPress CleanTalk plugin versions 5.173 and below suffer from multiple cross site scripting vulnerabilities.
WordPress Easy Cookie Policy plugin version 1.6.2 suffers from persistent cross site scripting vulnerability due to a broken access control.
Joomla! versions 4.1.0 and below suffer from path traversal and file overwrite vulnerabilities due to misplaced trust in the handling of compressed archives.
Chrome suffers from a heap use-after-free vulnerability in safe_browsing::ThreatDetails::OnReceivedThreatDOMDetails. Versions affected include Google Chrome 96.0.4664.110 (Official Build) (64-bit) and Chromium 99.0.4807.0 (Developer Build) (64-bit).
Message System version 1.0 suffers from a remote shell upload vulnerability.
One Church Management System version 1.0 suffers from multiple cross site scripting vulnerabilities.
Microfinance Management System version suffers from multiple remote SQL injection vulnerabilities including one that allows for authentication bypass. Original discovery of SQL injection in this version is attributed to Hejap…