>> CATEGORY: Security

Ladon Framework for Python 0.9.40 – XML External Entity Expansion

OctoberCMS 1.0.426 (Build 426) – Cross-Site Request Forgery

WhatsApp 2.17.52 – Memory Corruption

Ingenious School Management System 2.3.0 – ‘friend_index’ SQL injection

ZyXEL PK5001Z Modem – Backdoor Account

Website Broker Script – ‘status_id’ SQL Injection

Php Inventory – Arbitrary File Upload

WordPress Plugin Ultimate Product Catalog 4.2.24 – PHP Object Injection

Vastal I-Tech Agent Zone – SQL Injection

Online Exam Test Application – ‘sort’ SQL Injection