>> CATEGORY: Security

WordPress Plugin WPForms 1.6.3.1 – Persistent Cross Site Scripting (Authenticated)

BigBlueButton 2.2.25 – Arbitrary File Disclosure and Server-Side Request Forgery

ZeroLogon – Netlogon Elevation of Privilege

Online Doctor Appointment Booking System PHP and Mysql 1.0 – ‘q’ SQL Injection

SugarCRM 6.5.18 – Persistent Cross-Site Scripting

EgavilanMedia User Registration & Login System with Admin Panel Exploit – SQLi Auth Bypass

WordPress Plugin Buddypress 6.2.0 – Persistent Cross-Site Scripting

Microsoft Internet Explorer 11 – Use-After-Free

Froxlor Froxlor Server Management Panel 0.10.16 – Persistent Cross-Site Scripting

Logitech Solar Keyboard Service – ‘L4301_Solar’ Unquoted Service Path