Battle.Net version 1.27.1.12428 suffers from a privilege escalation vulnerability due to insecure file permissions.
xls2csv version 0.95 suffers from three overflow, one malloc fail, one memory leak, and two null pointer dereference vulnerabilities. Proof of concept code and ASAN analysis is included.
https://roiet1.go.th/o.htm notified by chinafans
http://md.go.th/gsh.html notified by GH057_5P3C706
Guild Wars 2 – Insecure Folder Permissions
NodeBB Forum 1.12.2-1.14.2 – Account Takeover
http://nonsamran.go.th notified by Black-Hat Defacer Team [ Myanmar ]
http://tungkula.go.th notified by Black-Hat Defacer Team [ Myanmar ]
http://naleng.go.th notified by Black-Hat Defacer Team [ Myanmar ]
Online Student’s Management System suffers from multiple unauthenticated remote SQL injection vulnerabilities. No version is provided for this software but a fix was verified by the author on October 7,…