Reflected XSS in Saysis's StarCities

Saysis Computer Systems Trade Ltd. Co. StarCities

iFrame Injection in Mikrogrup's Shopside

Shopside Software Technologies Inc. Shopside

ALC WebCTRL Carrier i-Vu Reflected XSS due to unsanitized parameter

Automated Logic WebCtrl Carrier i-Vu

ALC WebCTRL Carrier i-Vu Open Redirect via URL parameter

Automated Logic WebCtrl Carrier i-Vu

Use of default login credentials in Legacy Vivotek Devices

Vivotek Affected device model numbers are FD7131-VVTK,FD7131-VVTK,FD7131-VVTK,FD7141-VVTK,IP7131-VVTK,IP7133-VVTK,IP7133-VVTK,IP7133-VVTK,IP7134-VVTK,IP7135-VVTK,IP7135-VVTK,IP7135-VVTK,IP7135-VVTK,IP7137-VVTK,IP7137-VVTK,IP7137-VVTK,IP7137-VVTK,IP7137-VVTK,IP7137-VVTK,IP7138-VVTK,IP7142-VVTK,IP7142-VVTK,IP7151-VVTK,IP7152-VVTK,IP7153-VVTK,IP7153-VVTK,IP7154-VVTK,IP7330-VVTK,IP7330-VVTK,IP7330-VVTK,IP8131-VVTK,IP8131-VVTK,IP8131-VVTK,IP8131W-VVTK,PT7135-VVTK,PT7137-TCON,PT7137-VVTK,PT7137-VVTK,PT7137-VVTK,PT7137-VVTK,PZ7131-VVTK,PZ7131-VVTK,PZ71X1-VVTK,PZ71X1-VVTK,PZ71X2-VVTK,SD73X3-VVTK,SD73X3-VVTK,SD73X3-VVTK,TC5330-VVTK,TC5332-TCVV,TC5333-TCVV,TC5633-TCVV,TC5633-VVTK,VS7100-VVTK,VS7100-VVTK,VS7100-VVTK Vivotek Affected device model numbers are FD7131-VVTK,FD7131-VVTK,FD7131-VVTK,FD7141-VVTK,IP7131-VVTK,IP7133-VVTK,IP7133-VVTK,IP7133-VVTK,IP7134-VVTK,IP7135-VVTK,IP7135-VVTK,IP7135-VVTK,IP7135-VVTK,IP7137-VVTK,IP7137-VVTK,IP7137-VVTK,IP7137-VVTK,IP7137-VVTK,IP7137-VVTK,IP7138-VVTK,IP7142-VVTK,IP7142-VVTK,IP7151-VVTK,IP7152-VVTK,IP7153-VVTK,IP7153-VVTK,IP7154-VVTK,IP7330-VVTK,IP7330-VVTK,IP7330-VVTK,IP8131-VVTK,IP8131-VVTK,IP8131-VVTK,IP8131W-VVTK,PT7135-VVTK,PT7137-TCON,PT7137-VVTK,PT7137-VVTK,PT7137-VVTK,PT7137-VVTK,PZ7131-VVTK,PZ7131-VVTK,PZ71X1-VVTK,PZ71X1-VVTK,PZ71X2-VVTK,SD73X3-VVTK,SD73X3-VVTK,SD73X3-VVTK,TC5330-VVTK,TC5332-TCVV,TC5333-TCVV,TC5633-TCVV,TC5633-VVTK,VS7100-VVTK,VS7100-VVTK,VS7100-VVTK +29个

SQLi in Exagate's Webpack Management System

Eksagate Electronic Engineering and Computer Industry Trade Inc. Webpack Management System

codehub666 94list function.php login sql injection

codehub666 94list

Apache Causeway: Java deserialization vulnerability to authenticated attackers

Apache Software Foundation Apache Causeway apache causeway +1个

Remote Code Execution in Looker due to Improperly Validated Directory Deletion

Google Cloud Looker

A improper neutralization of script-related html tags in a web page (basic xss) vulnerability in For...

Fortinet FortiADC fortinet fortiadc +1个

Denial of service vulnerability in HAProxy mjson library

HAProxy Technologies HAProxy Community Edition haproxy aloha_appliance +7个

Insertion of Sensitive Information into Log File vulnerability in upKeeper Solutions upKeeper Manage...

upKeeper Solutions upKeeper Manager upkeeper upkeeper_manager

Code Snippets <= 3.9.1 - Authenticated (Contributor+) PHP Code Injection via extract() and PHP Filter Chains

codesnippetspro Code Snippets

GiveWP - Donation Plugin and Fundraising Platform <= 4.13.0 - Unauthenticated Stored Cross-Site Scripting via 'name'

stellarwp GiveWP – Donation Plugin and Fundraising Platform givewp givewp

Giveaways and Contests by RafflePress – Get More Website Traffic, Email Subscribers, and Social Followers <= 1.12.19 - Unauthenticated Stored Cross-Site Scripting

smub Giveaways and Contests by RafflePress – Get More Website Traffic, Email Subscribers, and Social Followers

Allocation of Resources Without Limits or Throttling in Shelly Pro 4PM

Shelly Pro 4PM

Out-of-bounds Read in Shelly Pro 3EM

Shelly Pro 3EM

SureForms <= 1.13.1 - Cross-Site Request Forgery Protection Bypass via Improper Nonce Distribution

brainstormforce SureForms – Contact Form, Custom Form Builder, Calculator & More

SiteSEO – SEO Simplified <= 1.3.2 - Insecure Direct Object Reference to Sensitive Post Meta Disclosure

softaculous SiteSEO – SEO Simplified

WavePlayer < 3.8.0 - Unauthenticated Arbitrary File Upload

Unknown WavePlayer