>> ARCHIVE: 2017-03

iBaseCMS version 1.23 suffers from file upload, remote code execution, and remote SQL injection vulnerabilities.

Western Digital My Cloud suffers from multiple command injection vulnerabilities.

Bull / IBM AIX Clusterwatch / Watchware suffers from having trivial admin credentials, system file writes, and OS command injection vulnerabilities.

Western Digital My Cloud suffers from a buffer overflow vulnerability that allows for remote code execution.

Struts S2-045 remote command execution proof of concept exploit.

Daily Deals Script version 1.0 suffers from a remote SQL injection vulnerability.

Joomla Akeeba Backup component version 5.2.5 suffers from a directory traversal vulnerability.

Evostream Media Server version 1.7.1 suffers from a denial of service vulnerability.

Mini CMS version 1.1 suffers from a remote SQL injection vulnerability.

Western Digital My Cloud suffers from unauthenticated OS command injection and arbitrary file upload vulnerabilities.