#firefox

Cryptolive CMS version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass.

CRM Education Akademik version 9.0 suffers from a directory traversal vulnerability.

CREDITS PREVICINI CMS version 1.02 suffers from a cross site scripting vulnerability.

Courier Deprixa Pro Integrated Web System version 3.2.5 suffers from a cross site request forgery vulnerability.

Coupons CMS version 4.00 suffers from an open redirection vulnerability.

Verint Engagement Management 15.3 Update 2023R2 is vulnerable to HTML injection via the user data form in the live chat.

Advanced persistent threat (APT) actors exploited a recently disclosed critical flaw impacting Ivanti Endpoint Manager Mobile (EPMM) as a zero-day since at least April 2023 in attacks directed against Norwegian entities, including a government network. The disclosure comes as part of a new joint advisory released by the Cybersecurity and Infrastructure Security Agency (CISA) and the Norwegian

Eramba version 3.19.1 suffers from a remote command execution vulnerability.

The Barebones CMS v2.0.2 is vulnerable to Stored Cross-Site Scripting (XSS) when an authenticated user interacts with certain features on the admin panel.

CoolAdmin version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass.