concrete5 version 8.1.0 suffers from a host header injection vulnerability.
Agorum Core Pro 7.8.1.4-251 XXE Injection
Agorum Core Pro version 7.8.1.4-251 suffers from an XML external entity injection vulnerability.
Agorum Core Pro 7.8.1.4-251 Cross Site Scripting
Agorum Core Pro version 7.8.1.4-251 suffers from a reflective cross site scripting vulnerability.
AlienVault USM/OSSIM 5.3.4 / 5.3.5 Remote Command Execution
This Metasploit module exploits an unauthenticated command injection in Alienvault USM/OSSIM versions 5.3.4 and 5.3.5. The vulnerability lies in an API function that does not check for authentication and then passes user input directly to a system call as root.
GNS3 Mac OS-X 1.5.2 ubridge Privilege Escalation
GNS3 Mac OS-X version 1.5.2 ubridge privilege escalation exploit.
Agorum Core Pro 7.8.1.4-251 Cross Site Request Forgery
Agorum Core Pro version 7.8.1.4-251 suffers from a cross site request forgery vulnerability.
Agorum Core Pro 7.8.1.4-251 Cross Site Scripting
Agorum Core Pro version 7.8.1.4-251 suffers from a persistent cross site scripting vulnerability.
PonyOS 4.0 fluttershy LD_LIBRARY_PATH Privilege Escalation
PonyOS version 4.0 fluttershy LD_LIBRARY_PATH local kernel exploit.
Agorum Core Pro 7.8.1.4-251 Insecure Direct Object Reference
Agorum Core Pro version 7.8.1.4-251 suffers from an insecure direct object reference vulnerability.
Hipchat Remote Code Execution
Hipchat server versions prior to 2.2.3 suffer from a remote code execution vulnerability that can be leveraged via Administrative Imports.