An HTML Injection vulnerability has been discovered on the RICOH SP 4510DN via the /web/entry/en/address/adrsSetUserWizard.cgi entryNameIn parameter.

An HTML Injection vulnerability has been discovered on the RICOH SP 4520DN via the /web/entry/en/address/adrsSetUserWizard.cgi entryNameIn or entryDisplayNameIn parameter.

Gemalto (Thales Group) DS3 Authentication Server and Ezio Server versions prior to 3.1.0 suffer from semi-blind OS command injection, local file disclosure, and broken access controls that when combined allows…

SpotIM version 2.2 denial of service proof of concept exploit.

Symphony Project sfDoctrinesfPropel version 1.x suffers from a database password disclosure.

TheHive Project Cortex versions 2.1.3 and below suffer from a server-side request forgery vulnerability.

Convert Video jetAudio version 8.1.7 denial of service proof of concept exploit.

jetCast Server version 2.0 denial of service proof of concept exploit.

SpotPaltalk version 1.1.5 denial of service proof of concept exploit.

ASPRunner.NET version 10.1 denial of service proof of concept exploit.