WordPress Plugin Search Meter 2.13.2 – CSV injection
WordPress Plugin Search Meter 2.13.2 – CSV injection
ASUS AXSP 1.02.00 – ‘asComSvc’ Unquoted Service Path
http://schoolmy2560.surat3.go.th notified by B14CKM4RK3T3R
Iskysoft Application Framework Service version 2.4.3.241 suffers from an unquoted service path vulnerability.
Microsoft Windows WizardOpium local privilege escalation exploit.
SpyHunter 4 suffers from an unquoted service path vulnerability.
ManageEngine Desktop Central FileStorage getChartImage deserialization and unauthenticated remote code execution exploit.
ASUS GiftBox Desktop version 1.1.1.127 suffers from an unquoted service path vulnerability.
Deep Instinct Windows Agent version 1.2.29.0 suffers from an unquoted service path vulnerability.
Sentrifugo HRMS version 3.2 suffers from a remote SQL injection vulnerability. This version of this software already had a remote SQL injection issue reported to Packet Storm in August of…