>> CATEGORY: exploit

Microsoft SQL Server Management Studio versions 17.9 and 18.0 Preview 4 suffer from a REGSRVR filehandling XML external entity injection vulnerability.

Microsoft SQL Server Management Studio versions 17.9 and 18.0 Preview 4 suffer from a xel filetype XML external entity injection vulnerability.

E-Registrasi Pencak Silat version 18.10 suffers from a remote SQL injection vulnerability.

Microsoft SQL Server Management Studio versions 17.9 and 18.0 Preview 4 suffer from an xmla filetype XML external entity injection vulnerability.

LUYA CMS version 1.0.12 suffers from a cross site scripting vulnerability.

CAMALEON CMS version 2.4 suffers from a cross site scripting vulnerability.

Free MP3 CD Ripper version 2.8 .wma buffer overflow SEH exploit with DEP bypass.

Full advisory and proof of concept information for denial of service vulnerabilities in net-snmp version 5.7.3.

Wikidforum version 2.20 suffers from a remote SQL injection vulnerability.

NPLUG Wireless Repeater version 1.0.0.14 suffers from authentication bypass, cross site request forgery, and cross site scripting vulnerabilities.