MailDepot version 2032 SP2 (2.2.1242) suffers from an improper authorization vulnerability. The REDDOXX MailDepot web service does not correctly verify whether a user has the proper rights to access specified…

Platinum Mobile version 1.0.4.850 has a broken access control. The mobile application connects to the company-specific server, which does not properly restrict the access to confidential data. Thus, an authenticated…

udisks and the Linux kernel have an issue where udisks permits users to mount romfs and romfs leaks uninitialized memory to userspace.

This archive contains all of the 97 exploits added to Packet Storm in September, 2020.

Typesetter CMS version 5.1 suffers from a persistent cross site scripting vulnerability.

WebsiteBaker version 2.12.2 suffers from an authenticated remote SQL injection vulnerability.

SpinetiX Fusion Digital Signage versions 3.4.8 and below suffer from a username enumeration vulnerability.

MonoCMS Blog version 1.0 suffers from arbitrary file deletion, cross site request forgery, and information disclosure vulnerabilities.

SpinetiX Fusion Digital Signage version 3.4.8 suffers from a cross site request forgery vulnerability.

GetSimple CMS version 3.3.16 suffers from a persistent cross site scripting vulnerability.