ManageEngine ServiceDesk Plus 9.3 – User Enumeration
ManageEngine ServiceDesk Plus 9.3 – User Enumeration
Download Accelerator Plus (DAP) 10.0.6.0 – SEH Buffer Overflow
Tradebox CryptoCurrency – ‘symbol’ SQL Injection
WordPress Plugin Limit Login Attempts Reloaded 2.7.4 – Login Limit Bypass
CentOS Web Panel 0.9.8.793 (Free) / 0.9.8.753 (Pro) – Cross-Site Scripting
River Past Cam Do 3.7.6 – ‘Activation Code’ Local Buffer Overflow
AllPlayer 7.4 – SEH Buffer Overflow (Unicode)
Administrative credentials submitted to the Arris Touchstone TG1672 are sent over HTTP base64 encoded in a GET request.
Open-Xchange AppSuite versions 7.10.1 and below suffer from information exposure and improper access control vulnerabilities.
WordPress Form Maker plugin version 1.13.2 suffers from cross site request forgery and local file inclusion vulnerabilities.