>> CATEGORY: exploit

DedeCMS version 5.8 suffers from a cross site scripting vulnerability.

Citadel WebCit versions prior to 926 suffer from a session hijacking vulnerability.

Wondershare Dr.Fone version 3.0.0 suffers from an unquoted service path vulnerability.

Simple College Website version 1.0 suffers from code execution and remote SQL injection vulnerabilities.

The Microsoft Windows Kernel Cryptography Driver (cng.sys) exposes a DeviceCNG device to user-mode programs and supports a variety of IOCTLs with non-trivial input structures. It constitutes a locally accessible attack…

Online Examination System version 1.0 suffers from a persistent cross site scripting vulnerability.

Point of Sales version 1.0 suffers from a persistent cross site scripting vulnerability.

Mailman versions 1.x up through 2.1.23 suffer from a cross site scripting vulnerability.

Lot Reservation Management System version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass.