>> CATEGORY: exploit

WSTMart version 2.0.8 suffers from a cross site request forgery vulnerability.

WSTMart version 2.0.8 suffers from a cross site scripting vulnerability.

The vulnerability laboratory core research team discovered a local pin passcode bypass vulnerability in the official app…

…

PCRE version 8.41 suffers from a buffer overflow in the match() function.

Netatalk versions prior to 3.1.12 suffer from an authentication bypass vulnerability.

Exiftool version 8.3.2.0 suffers from a dll hijacking vulnerability.

Multiple vulnerabilities were found in the GLCKIo and Asusgio drivers installed by ASUS Aura Sync, which could allow a local attacker to elevate privileges. ASUS Aura Sync versions 1.07.22 and…

Multiple vulnerabilities were found in the GPCIDrv and GDrv drivers as bundled with several GIGABYTE and AORUS branded motherboard and graphics card utilities, which could allow a local attacker to…

Zoho ManageEngine OpManager versions 12.3 before build 123239 suffers from a remote SQL injection vulnerability in the Alarms section.