Progress Kendo UI Editor version 2018.1.221 suffers from a persistent cross site scripting vulnerability.
Citrix StorageZones Controller versions prior to 5.4.2 suffer from padding oracle, improper access restriction, and path traversal vulnerabilities.
CMS ISWEB version 3.5.3 suffers from a remote SQL injection vulnerability.
ManageEngine Desktop Central 10.0.271 – Cross-Site Scripting
Rausoft ID.prove 2.95 – ‘Username’ SQL injection
EE 4GEE Mini EE40_00_02.00_44 – Privilege Escalation
iWay Data Quality Suite Web Console 10.6.1.ga – XML External Entity Injection
http://nbc.dip.go.th/sa.html notified by Mr.Kro0oz.305
http://nbcsystem.dip.go.th/sa.html notified by Mr.Kro0oz.305
http://nec.dip.go.th/sa.html notified by Mr.Kro0oz.305