Category: Security

[webapps] Clinic Pro v4 – 'month' SQL Injection

[dos] Google Chrome 72.0.3626.81 – 'V8TrustedTypePolicyOptions::ToImpl' Type Confusion

[webapps] iScripts ReserveLogic – SQL Injection

[dos] WebKitGTK+ – 'ThreadedCompositor' Race Condition

[dos] SpiderMonkey – IonMonkey Compiled Code Fails to Update Inferred Property Types (Type Confusion)

[webapps] Inout RealEstate – 'city' SQL Injection

[webapps] Inout EasyRooms – SQL Injection

[webapps] JioFi 4G M2S 1.0.2 – Cross-Site Request Forgery

[webapps] WordPress Plugin PayPal Checkout Payment Gateway 1.6.8 – Parameter Tampering

[webapps] LimeSurvey < 3.16 – Remote Code Execution