An access control issue in Trimble TM4Web version 22.2.0 allows unauthenticated attackers to access a specific crafted URL path to retrieve the last registration access code and use this access code to register a valid account. If the access code was used to create an Administrator account, attackers are also able to register new Administrator accounts with full rights and privileges.
f463a33e91d671de7054018540aff6f6ec53938dedf239b9646be10f49edfccf
LiveZilla Server version 8.0.1.0 suffers from a cross site scripting vulnerability.
db3e15ccee623c8f25470aa46cc48050395fce776022c46b16c3d17c38755694
CloudMe version 1.11.2 SEH buffer overflow exploit.
dd926be7b4fc7bcef00625aa9853f7d8daaf02f5fd5828b55aa7fe3e2fd4c552