Author: Cyberthreat Blog

Tiny Tiny RSS before 829d478f is vulnerable to XSS window.opener attack

All versions of Candy Chat are vulnerable to an XSS attack by message senders, permitting remote code execution within the page

RVM automatically loads environment variables from files in $PWD resulting in command execution RVM vulnerable to command injection when automatically loading environment variables from files in $PWD RVM automatically executes...

WordPress plugin Relevanssi version 3.5.7.1 is vulnerable to stored XSS resulting in attacker being able to execute JavaScript on the affected site

Framadate version 1.0 is vulnerable to Formula Injection in the CSV Export resulting possible Information Disclosure and Code Execution