Category: Security

[webapps] Ladon Framework for Python 0.9.40 – XML External Entity Expansion

[webapps] OctoberCMS 1.0.426 (Build 426) – Cross-Site Request Forgery

[dos] WhatsApp 2.17.52 – Memory Corruption

[webapps] Ingenious School Management System 2.3.0 – 'friend_index' SQL injection

[remote] ZyXEL PK5001Z Modem – Backdoor Account

[webapps] Website Broker Script – 'status_id' SQL Injection

[webapps] Php Inventory – Arbitrary File Upload

[webapps] WordPress Plugin Ultimate Product Catalog 4.2.24 – PHP Object Injection

[webapps] Vastal I-Tech Agent Zone – SQL Injection

[webapps] Online Exam Test Application – 'sort' SQL Injection