Category: Security

[webapps] PilusCart 1.4.1 – Local File Disclosure

[webapps] Jobberbase 2.0 – 'subscribe' SQL Injection

[dos] Webkit JSC: JIT – Uninitialized Variable Access in ArgumentsEliminationPhase::transform

[webapps] SQLiteManager 1.2.0 / 1.2.4 – Blind SQL Injection

[webapps] Jobberbase 2.0 CMS – 'jobs-in' SQL Injection

[dos] Outlook Password Recovery 2.10 – Denial of Service

[webapps] Tableau – XML External Entity

[webapps] LSoft ListServ < 16.5-2018a – Cross-Site Scripting

[webapps] openITCOCKPIT 3.6.1-2 – Cross-Site Request Forgery

[webapps] WordPress Plugin Import Export WordPress Users 1.3.1 – CSV Injection