>> CATEGORY: exploit

MACCMS version 10 suffers from a cross site request forgery vulnerability.

Redaxo CMS Mediapool add-on versions prior to 5.5.1 suffer from a remote file upload vulnerability.

Microsoft Windows 10 version 1709 suffers from a child process restriction mitigation bypass vulnerability.

Ecos Secure Boot Stick version 5.6.5 and System Management version 5.2.68 suffers from credential disclosure and various other security vulnerabilities that can lead to information disclosure.

Rockwell Automation RSLinx Classic and FactoryTalk Linx Gateway suffer from a privilege escalation vulnerability. Rockwell Automation RSLinx Classic versions 3.90.01, 3.73.00, 3.72.00, and 2.58.00 are susceptible. Rockwell Automation FactoryTalk Linx…

Samsung Web Viewer for Samsung DVR suffers from a cross site scripting vulnerability.

Eclipse Vert.x versions 3.0.0 through 3.5.1 suffer from an HTTP header injection vulnerability.

The Vulnerability Laboratory Core Research Team discovered a client-side header inject web vulnerability in the official…

Siaberry version 1.2.2 suffers from a command injection vulnerability.

Joomla EkRishta component version 2.10 suffers from a remote SQL injection vulnerability in the username field.