Core FTP LE version 2.2 buffer overflow proof of concept exploit.

Dolibarr ERP CRM versions 7.0.3 and below suffers from a remote PHP code injection vulnerability.

DAMICMS version 6.0.0 suffers from an add administrator cross site request forgery vulnerability.

Axis Cameras suffer from authorization bypass, unrestricted dbus access, command injection, denial of service, and information disclosure vulnerabilities.

Microsoft Forefront Unified Access Gateway 2010 allows remote attackers to trigger outbound DNS queries for arbitrary hosts via a comma-separated list of URLs in the orig_url parameter, possibly causing a…

The WePay Chat SDK suffers from an XML external entity injection vulnerability.

ntop-ng versions prior to 3.4.180617 suffer from a deterministic session ID vulnerability.

NuCom NC-WR644GACV with software versions STA 005 and below suffer from a configuration file download vulnerability that allows for extraction of the administrative credentials.

An issue was found in openslp version 2.0.0 that can be used to induce a double free bug or memory corruption by corrupting glibc’s doubly-linked memory chunk list. An exploit…

OX App Suite version 7.8.5 suffers from XML external entity injection, information disclosure, and cross site scripting vulnerabilities.