Category: Security

[remote] Win10 MailCarrier 2.51 – 'POP3 User' Remote Buffer Overflow

[webapps] Intelbras Router WRN150 1.0.18 – Cross-Site Request Forgery

[webapps] Part-DB 0.4 – Authentication Bypass

[webapps] waldronmatt FullCalendar-BS4-PHP-MySQL-JSON 1.21 – 'start' SQL Injection

[webapps] waldronmatt FullCalendar-BS4-PHP-MySQL-JSON 1.21 – 'description' Cross-Site Scripting

[local] JumpStart 0.6.0.0 – 'jswpbapi' Unquoted Service Path

[webapps] delpino73 Blue-Smiley-Organizer 1.32 – 'datetime' SQL Injection

[local] ChaosPro 2.0 – Buffer Overflow (SEH)

[dos] WebKit – Universal XSS in HTMLFrameElementBase::isURLAllowed

[webapps] ClonOs WEB UI 19.09 – Improper Access Control