>> CATEGORY: exploit

Dimofinf CMS version 3.0.0 suffers from a cross site scripting vulnerability.

The Cisco ASA VPN Portal password recovery page suffers from a cross site scripting vulnerability.

A persistent cross site scripting vulnerability has been discoverd in the official web-application Product Chamilo LMS.

The Vulnerability Laboratory Core Research Team discovered an application-side input validation web vulnerability in the official ifixit online service web-application.

Ntpd versions ntp-4.2.6p5 and below ctl_putdata() buffer overflow exploit.

Manage Engine OPutils version 8.0 suffers from a privilege escalation vulnerability.

Manage Engine OPutils version 8.0 suffers from cross site request forgery and cross site scripting vulnerabilities.

Windows kerberos security feature bypass exploit that leverages the vulnerability discussed in MS16-014.

desk.com suffered from a cross site scripting vulnerability.