Free CMS version 1.0a suffers from a cross site scripting vulnerability via a malicious upload.

Rich FileManager version 2.7.0 suffers from a cross site scripting vulnerability via a malicious file upload.

Mara CMS version 7.1 suffers from a cross site scripting vulnerability.

Wikindx version 5.2.1 suffers from a cross site scripting vulnerability.

WordPress Doctor Appointment Booking plugin version 1.0.0 suffers from cross site scripting and remote SQL injection vulnerabilities.

Multiple versions of Whole Vibratissimo Smart Sex Toy suffer from credential disclosure, exposed administrative interface, cleartext storage of passwords, unauthenticated bluetooth LE connection, and other vulnerabilities. These devices screw you…

Geovision Inc. devices GV-BX1500 version 3.10 2016-12-02 and GV-MFD1501 version 3.12 2017-06-19 suffer from remote command execution, stack overflow, double free, and other vulnerabilities.

Advance Loan Management System version 1.0 suffers from a remote SQL injection vulnerability.

JEXTN Classified component version 1.0.0 suffers from a remote SQL injection vulnerability.

Microsoft Windows Subsystem for Linux execve() local privilege escalation exploit.