Microsoft Excel 2016 version 1901 suffers from an XML external entity injection vulnerability.
Carlo Gavazzi SmartHouse version 6.5.33 suffers from cross site request forgery along with both reflective and persistent cross site scripting vulnerabilities.
http://nbcsystem.dip.go.th/x3.html notified by Explosion Squad Cyber
WordPress version 5.3 suffers from a username enumeration vulnerability.
TexasSoft CyberPlanet version 6.4.131 suffers from a CCSrvProxy unquoted service path vulnerability.
GHIA CamIP version 1.2 for iOS suffers from a denial of service vulnerability.
Mersive Solstice version 2.8.0 suffers from a remote code execution vulnerability.
SpotAuditor version 5.3.2 Name and Key proof of concept denial of service exploits.
Online Inventory Manager version 3.2 suffers from a persistent cross site scripting vulnerability.
An issue was discovered in disable_priv_mode in shell.c in GNU Bash through 5.0 patch 11. By default, if Bash is run with its effective UID not equal to its real…