Overview : Cross-site request forgery (CSRF) vulnerability in the Storefront Application in DS Data Systems KonaKart before 7.3.0.0 allows remote attackers to hijack the authentication…
Overview : D-Link DIR-859 routers before v1.07b03_beta allow Unauthenticated Information Disclosure via the AUTHORIZED_GROUP=1%0a value, as demonstrated by vpnconfig.php. Affected Product(s) : D-Link DIR-859 before…
Overview : In the 3.1.12 Pro version of the Craft CMS web application, the XSS vulnerability has been discovered in the header insertion field when…
Overview : In Archery before 1.3, inserting an XSS payload into a project name (either by creating a new project or editing an existing one)…
Overview : All HTML forms present in the Belkin F5D8236-4 v2 are susceptible to Cross-Site Request Forgery. Affected Product(s) : Belkin F5D8236-4 v2 Vulnerability Details…
Overview : The EntityTokenSerializer class in Composite.dll is prone to unvalidated deserialization of wrapped BinaryFormatter payloads, leading to arbitrary remote code execution for any low-privilege…