Microsoft’s dnslint.exe tool does not verify domain names when parsing DNS text-files using the “/ql” switch making it prone to forced drive-by downloads, providing an end user is tricked into…
>> CATEGORY: exploit
Chrome suffers from a reference count leak in SwiftShader OpenGL texture bindings.
MyBB New Threads plugin version 1.1 suffers from a cross site scripting vulnerability.
Chrome suffers from floating-point precision errors in Swiftshader blitting.
WordPress All In One Favicon plugin version 4.6 suffers from a cross site scripting vulnerability.
CMS Made Simple version 2.2.5 allows an authenticated administrator to upload a file and rename it to have a .php extension. The file can then be executed by opening the…
FTP2FTP version 1.0 suffers from an arbitrary file download vulnerability.
GhostMail suffers from an html injection vulnerability.
GhostMail suffers from a malicious script insertion vulnerability.
Open-AudIT Community version 2.1.1 suffers from a cross site scripting vulnerability.