CVE-2017-7991
Exponent CMS 2.4.1 and earlier has SQL injection via a base64 serialized API key (apikey parameter) in the api function of framework/modules/eaas/controllers/eaasController.php.
Read MoreAuthor: Cyberthreat Blog
CVE-2017-8052
Craft CMS before 2.6.2974 allows XSS attacks.
Read MoreCVE-2016-1198
Photopt for Android before 2.0.1 does not verify SSL certificates.
Read MoreCVE-2016-2433
The Broadcom Wi-Fi driver for Android, as used by BlackBerry smartphones before Build AAE570, allows remote attackers to execute arbitrary code in the context of the kernel.
Read MoreCVE-2016-1186
Kintone mobile for Android 1.0.0 through 1.0.5 does not verify SSL server certificates.
Read More