>> CATEGORY: exploit

CKEditor 3 suffers from a server-side request forgery vulnerability.

Cotonti Siena version 0.9.19 suffers from a persistent cross site scripting vulnerability.

Disk Savvy version 13.6.14 suffers from an unquoted service path vulnerability.

Sync Breeze version 13.6.18 suffers from an unquoted service path vulnerability.

OpenEMR version 5.0.1.3 suffers from an authentication bypass vulnerability.

Email-Worm.Win32.Kipis.a malware suffers from a code execution vulnerability.

Online Shopping Portal version 3.1 suffers from a remote shell upload vulnerability.

Workspace ONE Intelligent Hub version 20.3.8.0 suffers from an unquoted service path vulnerability.

Trojan.Win32.Alien.erf malware suffers from a denial of service vulnerability.

Zoho ManageEngine ServiceDesk Plus version 9.4 suffers from a user enumeration vulnerability.