Backdoor.Win32.Wuca.nz malware suffers from an insecure permissions vulnerability.
Intelbras Router RF 301K with firmware versions 1.1.2 through 1.1.5 suffer from a cross site request forgery vulnerability.
OpenCart version 3.0.3.7 suffers from a cross site request forgery vulnerability.
Backdoor.Win32.XRat.d malware suffers from a code execution vulnerability.
FreeFloat FTP Server version 1.0 SIZE denial of service exploit.
WordPress Visitors-App plugin version 0.3 suffers from a persistent cross site scripting vulnerability.
There is a vulnerability in jscript9 that could potentially be exploited to execute arbitrary code when viewing an attacker-controlled website in Internet Explorer. The vulnerability has been confirmed on Windows…
WordPress Plugin visitors-app 0.3 – ‘user-agent’ Stored Cross-Site Scripting (XSS)
OpenCart 3.0.3.7 – ‘Change Password’ Cross-Site Request Forgery (CSRF)
OpenCart 3.0.3.6 – ‘subject’ Stored Cross-Site Scripting