Security Vulnerabilities
- CVEs Published In October 2016
Unauthenticated SQL Injection in Huge-IT Video Gallery v1.0.9 for Joomla
XSS in huge IT gallery v1.1.5 for Joomla
XSS and SQLi in huge IT gallery v1.1.5 for Joomla
Unauthenticated remote .jpg file upload in contus-video-comments v1.0 wordpress plugin
TP-LINK lost control of two domains, www.tplinklogin.net and tplinkextender.net. Please note that these domains are physically printed on many of the devices.
Ipswitch WhatsUp Gold 16.4.1 WrFreeFormText.asp sUniqueID Parameter Blind SQL Injection
Remote file upload vulnerability in wordpress plugin csv2wpec-coupon v1.1
Local File Inclusion Vulnerability in mypixs v0.3 wordpress plugin
Blind SQL Injection in wordpress plugin dukapress v2.5.9
Remote file download in simple-image-manipulator v1.0 wordpress plugin