WordPress Theme Fruitful 3.8 – Persistent Cross-Site Scripting
WordPress Theme Fruitful 3.8 – Persistent Cross-Site Scripting
DHCP Turbo 4.61298 – ‘DHCP Turbo 4’ Unquoted Service Path
Ice HRM 26.2.0 – Cross-Site Request Forgery (Add User)
MSI Packages Symbolic Links Processing – Windows 10 Privilege Escalation
SOPlanning 1.45 – ‘by’ SQL Injection
SWAPGS attack proof of concept exploit that demonstrates an information disclosure in the windows kernel.
phpMyChat Plus version 1.98 suffers from a remote SQL injection vulnerability.
HomeGuard Pro version 9.3.1 suffers from an insecure folder permission vulnerability.
EPSON EasyMP Network Projection version 2.81 suffers from an unquoted service path vulnerability.
SprintWork version 2.3.1 suffers from a local privilege escalation vulnerability.