>> CATEGORY: Security

Clinic Pro v4 – ‘month’ SQL Injection

Google Chrome 72.0.3626.81 – ‘V8TrustedTypePolicyOptions::ToImpl’ Type Confusion

iScripts ReserveLogic – SQL Injection

WebKitGTK+ – ‘ThreadedCompositor’ Race Condition

SpiderMonkey – IonMonkey Compiled Code Fails to Update Inferred Property Types (Type Confusion)

Inout RealEstate – ‘city’ SQL Injection

Inout EasyRooms – SQL Injection

JioFi 4G M2S 1.0.2 – Cross-Site Request Forgery

WordPress Plugin PayPal Checkout Payment Gateway 1.6.8 – Parameter Tampering

LimeSurvey < 3.16 – Remote Code Execution