Monitoring System (Dashboard) version 1.0 suffers from a remote SQL injection vulnerability.

Monitoring of Students Cyber Accounts System version 1.0 suffers from a remote SQL injection vulnerability.

QCubed versions 3.1.1 and below suffer from a cross site scripting vulnerability.

ForkCMS versions prior to 5.8.3 suffer from a PHP object injection vulnerability.

Microsoft Windows kernel suffers from a use-after-free of the PDEVOBJ object via a race condition vulnerability in NtGdiGetDeviceCapsAll.

This Metasploit module exploits a Java deserialization vulnerability in Apache OFBiz’s unauthenticated XML-RPC endpoint /webtools/control/xmlrpc for versions prior to 17.12.04.

MyBB OUGC Feedback plugin version 1.8.22 suffers from a cross site scripting vulnerability.

Trojan-Spy.Win32.KeyLogger.qt malware suffers from an insecure permissions vulnerability.

Nsasoft Hardware Software Inventory version 1.6.4.0 suffers from a denial of service vulnerability.

Trojan-Dropper.Win32.Hamer.10 malware suffers from a denial of service vulnerability.