>> CATEGORY: exploit

ESET NOD32 Antivirus suffers from a DLL hijacking vulnerability.

A crash can occur in Wireshark due to a heap-based out-of-bounds read in AirPDcapDecryptWPABroadcastKey.

Symfony PHP Framework versions 2.3.0 to 2.3.34, 2.6.0 to 2.6.11, and 2.7.0 to 2.7.6 suffers from a session fixation vulnerability.

WordPress Content Text Slider on Post plugin version 6.8 suffers from a cross site scripting vulnerability.

The Vulnerability Laboratory Core Research Team discovered a client side cross site scripting web vulnerability in the official Western Union China web application.

DELL Scrutinizer version 12.0.3 suffers from a persistent script insertion vulnerability.

Microsoft Windows win32k local privilege escalation exploit that leverages the vulnerability detailed in MS15-010.

A crash can occur in Wireshark due to a heap-based out-of-bounds read in Infer_pkt_encap.

DBKiss version 1.16 suffers from a cross site scripting vulnerability.

WordPress Gallery Master plugin version 1.0.22 suffers from a persistent cross site scripting vulnerability.