SolarWinds MSP PME Cache Service 1.1.14 – Insecure File Permissions
SolarWinds MSP PME Cache Service 1.1.14 – Insecure File Permissions
Sentrifugo CMS 3.2 – Persistent Cross-Site Scripting
CuteNews 2.1.2 – Arbitrary File Deletion
Kartris 1.6 – Arbitrary File Upload
An independent vulnerability laboratory researcher discovered a blind sql-injection web vulnerability in the official cp…
Pi-hole < 4.4 – Remote Code Execution / Privileges Escalation
Pi-hole < 4.4 – Remote Code Execution
ManageEngine DataSecurity Plus versions prior to 6.0.1 and ADAudit Plus versions prior to 6.0.3 suffers from a path traversal vulnerability that can lead to remote code execution.
Tiny MySQL suffers from a cross site scripting vulnerability.
Qik Chat version 3.0 for iOS suffers from a command injection vulnerability.