-
Vulnerability Watch No74
NewStatPress WordPress Plugin Exposes Admins to Stored XSS • FV Flowplayer Video Player Plugin Vulnerable to Stored XSS • Gmedia Photo Gallery SQL Injection Exposes WordPress Databases • Smart Forms WordPress Plugin Allows Unauthenticated Script Injection • Form Maker by 10Web Exposes Databases to Blind SQL Injection…
-
Vulnerability Watch No13
Critical Joomla Easy Store SQL Injection Exposes Databases • Joomla Easy Store Flaw Reveals Other Customers Orders • Joomla Easy Store Payment Forgery Bug Enables Order Manipulation • Proxygen HTTP2 Bug Can Trigger Memory Exhaustion DoS • CyberPanel Backup IDOR Lets Users Access Other Tenants…