WordPress Plugin WP Courses < 2.0.29 – Broken Access Controls leading to Courses Content Disclosure

from Exploit-DB.com RSS Feed https://ift.tt/3jnsUHf
via IFTTT

Loan Management System 1.0 – Multiple Cross Site Scripting (Stored)

from Exploit-DB.com RSS Feed https://ift.tt/34bLvS8
via IFTTT

Comtrend AR-5387un router – Persistent XSS (Authenticated)

from Exploit-DB.com RSS Feed https://ift.tt/31mwDOM
via IFTTT

Textpattern CMS 4.6.2 – Cross-site Request Forgery

from Exploit-DB.com RSS Feed https://ift.tt/3jbO2A1
via IFTTT

Typesetter CMS 5.1 – Arbitrary Code Execution (Authenticated)

from Exploit-DB.com RSS Feed https://ift.tt/35c7Luv
via IFTTT

Hostel Management System 2.1 – Cross Site Scripting (Multiple Fields)

from Exploit-DB.com RSS Feed https://ift.tt/3o8wrwk
via IFTTT

Jenkins 2.63 – Sandbox bypass in pipeline: Groovy plug-in

from Exploit-DB.com RSS Feed https://ift.tt/3dGk2ek
via IFTTT

HiSilicon Video Encoders – Unauthenticated RTSP buffer overflow (DoS)

from Exploit-DB.com RSS Feed https://ift.tt/2FHHwDt
via IFTTT

HiSilicon Video Encoders – Full admin access via backdoor password

from Exploit-DB.com RSS Feed https://ift.tt/3kaTJzy
via IFTTT

HiSilicon video encoders – RCE via unauthenticated upload of malicious firmware

from Exploit-DB.com RSS Feed https://ift.tt/2FHgvjn
via IFTTT