SmartHouse Webapp 6.5.33 – Cross-Site Request Forgery
SmartHouse Webapp 6.5.33 – Cross-Site Request Forgery
Anviz CrossChex 4.3.12 – Local Buffer Overflow
Nsauditor 3.1.8.0 – ‘Name’ Denial of Service (PoC)
Allied Telesis AT-GS950/8 up until firmware AT-S107 version 1.1.3 [1.00.047] suffers from a directory traversal vulnerability.
NAPC Xinet (interface) Elegant 6 Asset Library version 6.1.655 allows pre-authentication error-based SQL injection via the /elegant6/login LoginForm[username] field when double quotes are used.
Max Secure Anti Virus Plus version 19.0.4.020 suffers from an insecure permission vulnerability.
Microsoft Excel 2016 version 1901 suffers from an XML external entity injection vulnerability.
Carlo Gavazzi SmartHouse version 6.5.33 suffers from cross site request forgery along with both reflective and persistent cross site scripting vulnerabilities.
http://nbcsystem.dip.go.th/x3.html notified by Explosion Squad Cyber
WordPress version 5.3 suffers from a username enumeration vulnerability.