>> CATEGORY: exploit

YESWIKI version 0.2 suffers from a path traversal vulnerability.

Jenkins version 1.633 suffers from an unauthenticated credential recovery vulnerability.

Huawei HG630a and HG630a-50 ADSL modems come with a default SSH admin password.

CubeCart version 6.0.7 suffers from a cross site scripting vulnerability.

CubeCart version 6.0.7 suffers from a code execution vulnerability.

Supercali Event Calendar version 1.0.8 suffers from a cross site scripting vulnerability.

Supercali Event Calendar version 1.0.8 suffers from a cross site request forgery vulnerability.

Google AdWords API PHP client library versions 6.2.0 and below suffer from an arbitrary PHP code execution vulnerability.

A heap-based out-of-bounds memory read has been encountered in FreeType. It has been reproduced with the current version of freetype2 from master git branch, with a 64-bit build of the…

NXFilter version 3.0.3 suffers from a cross site scripting vulnerability.