>> CATEGORY: exploit

eventreg.oracle.com suffers from a cross site scripting vulnerability.

mySCADA myPRO version 7 has a hardcoded FTP username and password.

Joomla EkRishta component version 2.10 suffers from cross site scripting and remote SQL injection vulnerabilities.

Easy MPEG to DVD Burner version 1.7.11 local buffer overflow SEH exploit with DEP bypass.

D-Link DSL-3782 suffers from an authentication bypass vulnerability.

Default credentials in Adobe Experience Manager (AEM) versions prior to 6.3 can lead to remote code execution.

Multiple Siemens SIMATIC panels suffer from cross site request forgery and cross site scripting vulnerabilities.

Cisco SA520W Security Appliance suffers from a path traversal vulnerability.

Prime95 version 29.4b8 SEH buffer overflow exploit.

Infinity Market Classified Ads Script version 1.6.2 suffers from a cross site request forgery vulnerability.