Ingredient Stock Management System version 1.0 suffers from an account takeover vulnerability.
WordPress User Meta Lite and Pro plugin versions 2.4.3 and below suffer from a path traversal vulnerability.
Schneider Electric C-Bus Automation Controller (5500SHAC) version 1.10 suffers from an authenticated arbitrary command execution vulnerability. An attacker can abuse the Start-up (init) script editor and exploit the script POST…
Schneider Electric C-Bus Automation Controller (5500SHAC) version 1.10 suffers from an authenticated arbitrary command execution vulnerability. An attacker can abuse the Start-up (init) script editor and exploit the script POST…
https://loei2.go.th/1975.html notified by 1975 Team
https://amnat-ed.go.th/1975.html notified by 1975 Team
http://www.mhs-pao.go.th/zil.php notified by AnonCoders
qdPM version 9.1 authenticated remote code execution exploit that leverages a path traversal.
ChromeOS uses usbguard when the screen is locked but appears to suffer from bypass issues.
Tigase XMPP server suffers from a security vulnerability due to not escaping double quote character when serializing parsed XML. This can be used to smuggle (or, if you prefer, inject)…