>> CATEGORY: exploit

PHP Mass Mail version 1.0 suffers from a remote shell upload vulnerability.

WordPress Custom Frontend Login Registration Form plugin version 1.01 suffers from multiple cross site scripting vulnerabilities.

WordPress Ninja Forms version 3.3.17 suffers from a cross site scripting vulnerability.

PHP-Proxy version 5.1.0 suffers from a local file inclusion vulnerability.

Linux has a broken uid/gid mapping for nester user namespaces with greater than 5 ranges.

XAMPP Control Panel version 3.2.2 SEH unicode buffer overflow exploit.

Surreal ToDo version 0.6.1.2 suffers from a remote SQL injection vulnerability.

Surreal ToDo version 0.6.1.2 suffers from a local file inclusion vulnerability.

Alienor Web Libre version 2.0 suffers from a remote SQL injection vulnerability.

Musicco version 2.0.0 suffers from an arbitrary directory download vulnerability.